note 8500 added to Sicherheit
| From: | webmaster at vianet dot at | Date: | Thu, 14 Sep 2000 03:36:38 +0000 |
| Subject: | note 8500 added to Sicherheit | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-4935@lists.php.net to get a copy of this message | ||
A possible security gap could be, that php allows files to be read/written anywhere the
webserver's uid/gid allows.
To force fileaccess in web-owners directory only use the directive open_basedir
"/mydocumentroot"
http://www.php.net/manual/de/security.php