RE: [PHP] Filesystem security
| From: | ..s.c.o.t.t.. [gts] | Date: | Thu, 26 Apr 2001 19:36:25 +0000 |
| Subject: | RE: [PHP] Filesystem security | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-50489@lists.php.net to get a copy of this message | ||
my advice would be to disconnect the box from
the internet until you understand how to properly
secure it.
please read the documentation and manuals
before your box gets raped and pillaged....
> -----Original Message-----
> From: Maxim Maletsky [mailto:maxim.maletsky@japaninc.net]
> Subject: RE: [PHP] Filesystem security
>
>
> Read the php.ini file and the manuals on php.net.
>
> There are some directives which can limit the parser to operate on files
> under a certain level.
>
> You can also disallow functions if you care. As well as what directives can
> be overwritten by .htaccess files.
>
> No idea where have I read all that, but I am sure there is.
>
>
> -----Original Message-----
> From: Anton G. Popov [mailto:anton@bitex.com]
> Subject: [PHP] Filesystem security
>
> Hi
>
> I have to set up a site for free web hosting incl. php
> I installed apache and php4.0.4pl1 and now the php scripts can browse the
> entire filesystem of the machine. Does anyone know how to fix that?
>
> 10x a lot
>
> Antt