note 10137 added to Security
| From: | mbabcock-php at fibrespeed dot net | Date: | Fri, 15 Dec 2000 02:29:14 +0000 |
| Subject: | note 10137 added to Security | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-8749@lists.php.net to get a copy of this message | ||
More safe mode documentation is needed. I've enabled safe mode on one server and without
setting the base directory, any user can fopen("/etc/passwd","rt"); if they
wanted to.
http://www.php.net/manual/security.php