note 9563 added to Filesystem Security
| From: | eLuddite at not dot a dot real dot addressnsky dot ru | Date: | Sat, 11 Nov 2000 14:44:26 +0000 |
| Subject: | note 9563 added to Filesystem Security | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-7598@lists.php.net to get a copy of this message | ||
I think the lesson is clear:
(1) Forbit path separators in usernames.
(2) map username to a physical home directory - /home/username is fine
(3) read the home directory
(4) present only results of (3) as an option for deletion.
I have discovered a marvelous method of doing the above in php but this submission box is too small
to contain it.
:-)
http://www.php.net/manual/security.filesystem.php