Re: Re: Problem with PHP security on windows

From: Date: Mon, 07 Jan 2002 23:55:12 +0000
Subject: Re: Re: Problem with PHP security on windows
Groups: php.general 
Request: Send a blank email to php-general+get-79738@lists.php.net to get a copy of this message
Hi, I wrote this already one time and received some parameters for my apache.. but I think document root etc are all correct in apache. I set safemode etc also on in php.ini but it seems to ignore those settings completly. here my problem: I have a big security hole in my php and I cannot get out why: Operating system: Windows XP PHP version: 4.1.1 Bug description: Script accesses harddrive. what did I do wrong? I installed Apache 1.3.20 with PHP and now I saw, a php script can show my complete harddrive remotly. I don't know if it is a bug in php, I think not, I think I configured something wrong but I have ABSOLUTLY no idea what and I didn't find help anywhere. maybe you can tell me what this could be. thanks a lot P.S.: how can I configure that scripts only access things in the directory they where executed or in their subdirs? chris ______________________________________________________________________________ Darf es ein bisschen mehr sein? Mehr Speicher, mehr Mail, mehr Erlebnis, mehr Prämie, mehr WEB.DE. Der WEB.DE Club - http://club.web.de

« previous php.general (#79738) next »