Script accesses complete harddrive. what did I do wrong?
| From: | christian_holler at web dot de | Date: | Fri, 04 Jan 2002 14:52:23 +0000 |
| Subject: | Script accesses complete harddrive. what did I do wrong? | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-79460@lists.php.net to get a copy of this message | ||
Hi,
I have a big security hole in my php and I cannot get out why:
Operating system: Windows XP
PHP version: 4.1.1
Bug description: Script accesses harddrive. what did I do wrong?
I installed Apache 1.3.20 with PHP and now I saw, a php script can show my
complete harddrive remotly. I don't know if it is a bug in php, I think
not, I think I configured something wrong but I have ABSOLUTLY no idea what
and I didn't find help anywhere. maybe you can tell me what this could be.
thanks a lot
P.S.: how can I configure that scripts only access things in the directory they where executed or in
their subdirs?
chris
________________________________________________________________
Keine verlorenen Lotto-Quittungen, keine vergessenen Gewinne mehr!
Beim WEB.DE Lottoservice: http://tippen2.web.de/?x=13