Re: Why to use PHP


Rik wrote:
R K wrote:
Rik wrote:
R K wrote:
BTW, how do I fix this in an administrative way?

Nevermind. Put this in the .htaccess file in the upload directory:

php_value engine off

Upload/tmp directories shouldn't even be accessable by http....

/dir/
/uploadtmp/
/wwwroot/

Yeah, but suppose you wanted an upload to be web accessible after
it's moved from the tempdir?

That final directory needs the .htaccess, doesn't it?

And it's far better to put these kinds of settings in httpd.conf then
.htaccess, and forbidding to use .htaccess to change these values. If they

Then I'd have to reboot the server for every change, not interested in
that. Already short on time and this is not my real job.

have access to the directory, what stops them from deleting or altering the
.htaccess file, thus enabling PHP? I assume that when a user uploads a
file, he is allowed the either edit or delete it..

Wouldn't permissions on .htaccess prevent overwrite if the server is
not running as root? guess there's one way to find out...

-R

.

Relevant Pages

  • Re: [PHP] problem with register globals on new server
    ... I had to move my osComerce store to new hosting company. ... since evenon old server globals was Off I was adding ... Maybe your host doesn't allow it to be changed through a htaccess.. ... If you site administrator thinks that using an htaccess file is a security ...
    (php.general)
  • Re: Question: Frontage 2002 and the .htaccess file
    ... I believe .htaccess is somehow related to how, and whether, the fp extensions ... then that would break or corrupt the server extensions - ... Can you post back the exact contents of your .htaccess file - this might help ...
    (microsoft.public.frontpage.client)
  • Re: Why to use PHP
    ... Put this in the .htaccess file in the upload directory: ... You want PHP to be available, ...
    (comp.lang.php)
  • .htaccess question protect my php test environment
    ... I created a .htaccess file with vi and put this in it. ... then in the redhat http server utitily under server settings ... Do you Yahoo!? ...
    (php.general)
  • htaccess must be empty
    ... I am moving some php scripts to a new host. ... If I add a .htaccess file, or more specifically: ... results in internal server error messages. ... If I upload an empty .htaccess file, ...
    (comp.lang.php)