note 22311 rejected from security.apache by torben

From: Date: Thu, 13 Jun 2002 16:34:20 +0000
Subject: note 22311 rejected from security.apache by torben
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-31814@lists.php.net to get a copy of this message
PHP installed as mod for Apache under Windows NT should not be owned by Administrator or any kind of such power user. If safe mode is not enabled, an EXEC() command will execute processes with security restrictions that apply to PHP.EXE file owner. By default -it is- the system Administrator. Taking ownership over PHP installation directory with more limited account may be a good solution.

« previous php.notes (#31814) next »