Re: security and image upload folder
From: Tim Van Wassenhove (euki_at_pi.be)
Date: 01/27/04
- Next message: Mr. Bill: "Unable to load dynamic link library 'extensions\php.xxxxx.dll' - The specified module could not be found."
- Previous message: luke: "date_format"
- In reply to: H Birkeland: "security and image upload folder"
- Next in thread: H Birkeland: "Re: security and image upload folder"
- Reply: H Birkeland: "Re: security and image upload folder"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: 27 Jan 2004 12:32:55 GMT
On 2004-01-27, H Birkeland <knottulf@yahoo.no> wrote:
> I still have problems with my server provider, who has disabled php
> upload function after a hacker attack on the server via one of my php
> scripts.
> He is willing to turn it on again for single domains, but I am really
> afraid that there could be another attack via my scripts. If so he might
> charge me for damage to the server and other costs.
I wouldn't pay him a cent. It's his job to keep his server secure.
Everything that can be done by somethings that is uploaded, can be done
be a user with regular acccess too. So it's his fault that the users
have to many access rights... Sue him for providing you with an insecure
environment :P
-- http://home.mysth.be/~timvw
- Next message: Mr. Bill: "Unable to load dynamic link library 'extensions\php.xxxxx.dll' - The specified module could not be found."
- Previous message: luke: "date_format"
- In reply to: H Birkeland: "security and image upload folder"
- Next in thread: H Birkeland: "Re: security and image upload folder"
- Reply: H Birkeland: "Re: security and image upload folder"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|
