note 8500 deleted from Sicherheit by jmcastagnetto
| From: | jmcastagnetto@php.net | Date: | Thu, 14 Sep 2000 11:45:52 +0000 |
| Subject: | note 8500 deleted from Sicherheit by jmcastagnetto | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-4984@lists.php.net to get a copy of this message | ||
A possible security gap could be, that php allows files to be read/written anywhere the
webserver's uid/gid allows.
To force fileaccess in web-owners directory only use the directive open_basedir
"/mydocumentroot"