Re: hacks we should know about
| From: | Bill Rausch | Date: | Mon, 20 Aug 2001 15:15:44 +0000 |
| Subject: | Re: hacks we should know about | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-63738@lists.php.net to get a copy of this message | ||
Richard Lynch replied:
... - Kills file upload completely I *think* safe_mode can be on and files can be uploaded if the ISP works at it... But they have to want it bad enough to do some configuration. Most ISPs want to just install stuff as-is and not take the time to find out how to really configure it for optimum safety/functionality. ...Just curious about all of this. How many of these various security issues go away if you are hosting your own site and there are no user logins on the box other than your own and no services running except the web server? -- Bill Rausch, Software Development, Unix, Mac, Windows Numerical Applications, Inc. 509-943-0861 bill@numerical.com