note 9563 modified in Filesystem Security by jmoore
| From: | jmoore@php.net | Date: | Sat, 11 Nov 2000 15:50:05 +0000 |
| Subject: | note 9563 modified in Filesystem Security by jmoore | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-7601@lists.php.net to get a copy of this message | ||
I think the lesson is clear:
(1) Forbit path separators in usernames.
(2) map username to a physical home directory - /home/username is fine
(3) read the home directory
(4) present only results of (3) as an option for deletion.
I have discovered a marvelous method of doing the above in php but this submission box is too small
to contain it.
:-)
[ED: Should your email not be p.fermat@last.theorem.com ;)]
http://www.php.net/manual/filesystem-security.php