Re: upload compromises
| From: | Phil Driscoll | Date: | Fri, 01 Aug 2003 09:46:55 +0000 |
| Subject: | Re: upload compromises | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-3674@lists.php.net to get a copy of this message | ||
If ISPs want to prevent stupid scripts copying uploaded files under
document_root they can set ownership and permissions on document_root so that
the web server doesn't have permission to write files there. That should fix
all problems associated with uploading php, perl and other such files which
might be otherwise executed by the web server.
--
Phil Driscoll