Re: Security of PHP code

From: Date: Wed, 04 Jul 2001 14:12:06 +0000
Subject: Re: Security of PHP code
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-56170@lists.php.net to get a copy of this message
http://sourceforge.net/source.php?page_url=/source.php look at that... ----- Original Message ----- From: PHPBeginner.com <php-general@phpbeginner.com> To: <daviddickson@lycos.com>; php-general <php-general@lists.php.net> Sent: Thursday, July 05, 2001 12:08 AM Subject: RE: [PHP] Security of PHP code > SECURE, SECURE. > > It is not how secure PHP is, it is how well YOU protect it. > For example = make this line show_source($file); then go to your page like > file.php?file=/etc/passwd and you're freaked! > > There is a whole bunch of way to hack your pages if not protected well > enough, but PHP itself has no vital security problems. > > Try to search the archives for this topic and see what people think/suggest. > You will find there thousands of tips on what to do to have a bullet-proof > website. (always of the server is yours). > > > Sincerely, > > Maxim Maletsky > Founder, Chief Developer > > PHPBeginner.com (Where PHP Begins) > maxim@phpbeginner.com > www.phpbeginner.com > > > > > -----Original Message----- > From: David A Dickson [mailto:daviddickson@lycos.com] > Sent: Wednesday, July 04, 2001 10:43 PM > To: php-general > Subject: [PHP] Security of PHP code > > > Is it possible for others to view the php code for pages I have written? I > thought I heard someone say before that they could write a simple script to > accomplish this. If anyone knows of any tacticts people might use to attack > my code please post them hee. > > : David A. Dickson > : daviddickson@lycos.com > > > > > Get 250 color business cards for FREE! > http://businesscards.lycos.com/vp/fastpath/ > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net >

« previous php.general (#56170) next »