Re: SQLite security
| From: | Ilia Alshanetsky | Date: | Mon, 23 Aug 2004 16:52:59 +0000 |
| Subject: | Re: SQLite security | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-12308@lists.php.net to get a copy of this message | ||
On August 23, 2004 12:34 pm, Zeev Suraski wrote:
> The point is that hosting companies, especially those using chroot, have to
> make sure that they don't force their users to store the database files in
> web-accessible locations, since the server is most probably designed to be
> able to serve files owned by the user, and these database files fall under
> that category.
They also need to make sure that open_basedir (if used) will allow reading of
files from directories below the doc root.
Ilia