Re: SQLite security
| From: | Friedhelm Betz | Date: | Mon, 23 Aug 2004 13:36:19 +0000 |
| Subject: | Re: SQLite security | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-12301@lists.php.net to get a copy of this message | ||
On Monday 23 August 2004 14:27, Zeev Suraski wrote:
[...]
>
> Hrm, well, it's a very bad idea to put the database anywhere under the
> document root, because then you'd obviously be serving it for everyone to
> download. Encryption or no encryption, that's a very bad idea.
> Instead, you should place the database file outside of the document root
> (e.g. /usr/local/sqlite). Make sure that this directory is properly
> writable by the web server process and PHP, and you're done.
Running mod_php under safe_mode in an shared hosting environment this is
hardly to manage;-)
Regards
Friedhelm
--
www.hostsahring.net/