note 82090 added to security.filesystem

A note on mapping for added security. The principle with mapping is: WHAT YOU SEE MAY NOT BE. Map each entity that can be manipulated to a token. Only the token will be displayed to the end user. For added security, map allowed functionality to each token. Changing the token will at most cause a user to manipulate some else already mapped file. This achieve the goal of control and limited access. There is a variety to implement this but the main point here is that a physical name should never be displayed to the end user, thus restricting an evil user knowledge of the system and it architecture. This principle is also know under names such as "black box" or "need to know" or "abstraction", etc etc depending on the context. The point here is that one does not need to know under lying structure in order to do operation one high levels such as "add/move/remove/edit". Present a view - the view will provide the user with what the user need to know. It is all about creating an illusion of existence at higher level of something that does not exist on a lover level. ---- Server IP: 69.147.83.197 Probable Submitter: 80.126.36.212 ---- Manual Page -- http://www.php.net/manual/en/security.filesystem.php Edit -- https://master.php.net/note/edit/82090 Del: integrated -- https://master.php.net/note/delete/82090/integrated Del: useless -- https://master.php.net/note/delete/82090/useless Del: bad code -- https://master.php.net/note/delete/82090/bad+code Del: spam -- https://master.php.net/note/delete/82090/spam Del: non-english -- https://master.php.net/note/delete/82090/non-english Del: in docs -- https://master.php.net/note/delete/82090/in+docs Del: other reasons-- https://master.php.net/note/delete/82090 Reject -- https://master.php.net/note/reject/82090 Search -- https://master.php.net/manage/user-notes.php