Apache, PHP, Windows, and Security
| From: | Tim Mackenzie | Date: | Fri, 29 Mar 2002 01:27:22 +0000 |
| Subject: | Apache, PHP, Windows, and Security | ||
| Groups: | php.windows | ||
| Request: | Send a blank email to php-windows+get-12865@lists.php.net to get a copy of this message | ||
I'm running W2K with Apache and PHP4. I'm going to be hosting a number of
websites that I would like to provide PHP support for. What I don't want is
them to be able to access my entire file system. They should, at most, be
only allowed read/write access to their site folder. How do I go about
doing this? I've looked around, but I haven't found something that
addresses this. I know there's the basedir value (I think that's it), but I
don't understand how to use it. Could somebody (several people) please post
any tips they have for securing the file system of a web server. Thanks!