Re: Re: Security using Apache & Windows

There is a way of configuring PHP to limit access to the file system. You don't want any schmuck who uploads a PHP script access to your entire system, right? PHP allows you to limit what parts of the system can be seen. My question is how is this done? "B.A.T. Svensson" <B.A.T.Svensson@lumc.nl> wrote in message news:000401c1e20e$75bfd410$ce411eac@5-hkg-01-1234.lumc.nl... > This is after all and PHP list, so if you explain the relation to > PHP then people might help you > > Otherwise you might try ask in an apache or MS Windows support group.... > > > -----Original Message----- > > From: Tim Mackenzie > > Sent: Tuesday, April 02, 2002 5:47 PM > > To: php-windows@lists.php.net > > Subject: [PHP-WIN] Re: Security using Apache & Windows > > > > > > No one can help?! Please, please, please... > > > > "Tim Mackenzie" <tim@rabiddogmedia.com> wrote in message > > > I'm running W2K with Apache and PHP4. I'm going to be hosting a number of > > > websites that I would like to provide PHP support for. What I don't want is > > > them to be able to access my entire file system. They should, at most, be > > > only allowed read/write access to their site folder. How do I go about > > > doing this? I've looked around, but I haven't found something that > > > addresses this. I know there's the basedir value (I think that's it), but I > > > don't understand how to use it. Could somebody (several people) please post > > > any tips they have for securing the file system of a web server. Thanks!