RE: [PHP] Security of PHP code
| From: | PHPBeginner.com | Date: | Wed, 04 Jul 2001 14:08:31 +0000 |
| Subject: | RE: [PHP] Security of PHP code | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-56169@lists.php.net to get a copy of this message | ||
SECURE, SECURE.
It is not how secure PHP is, it is how well YOU protect it.
For example = make this line show_source($file); then go to your page like
file.php?file=/etc/passwd and you're freaked!
There is a whole bunch of way to hack your pages if not protected well
enough, but PHP itself has no vital security problems.
Try to search the archives for this topic and see what people think/suggest.
You will find there thousands of tips on what to do to have a bullet-proof
website. (always of the server is yours).
Sincerely,
Maxim Maletsky
Founder, Chief Developer
PHPBeginner.com (Where PHP Begins)
maxim@phpbeginner.com
www.phpbeginner.com
-----Original Message-----
From: David A Dickson [mailto:daviddickson@lycos.com]
Sent: Wednesday, July 04, 2001 10:43 PM
To: php-general
Subject: [PHP] Security of PHP code
Is it possible for others to view the php code for pages I have written? I
thought I heard someone say before that they could write a simple script to
accomplish this. If anyone knows of any tacticts people might use to attack
my code please post them hee.
: David A. Dickson
: daviddickson@lycos.com
Get 250 color business cards for FREE!
http://businesscards.lycos.com/vp/fastpath/
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
For additional commands, e-mail: php-general-help@lists.php.net
To contact the list administrators, e-mail: php-list-admin@lists.php.net