PHP SECURITY
| From: | outbound at centrum dot cz | Date: | Sat, 24 Nov 2001 12:24:57 +0000 |
| Subject: | PHP SECURITY | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-75607@lists.php.net to get a copy of this message | ||
Hello,
we have strange problem.
We host more domains and each user can use PHP of course.
But when any of our user use readdir and other commands for manipulating
with directories - this user can read scripts of others.
I have found open_basedir variable in php.ini and there is written that I
should use open_basedir="." - but it doesn't work :(
Do you know what to do ?
Thank you,
Roman