Re: Can anybody communicate with the operating system without the php server?


"Fro" <showandbeshown@xxxxxxxxx> wrote in message news:c0cafc32-d170-4ff5-a48e-b751d514e47f@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have a php-script which writes uploaded files into a directory. My
php-script gives a specific names to the saved files. I found in the
directory a file which has a name which could not be given by the php-
script. Could it be that somebody (which is not a user of the
operating system) communicate with the operating system (creates
files) without the usage of my php-script? Or it is impossible and I
have to search for a mistake in my script?

Thank you!

Sure, they could hack your server, either just your personal account data or else the entire server. But it's 100 or 1000 times more likely that they breached security through a file upload, if you use a reputable third-party host.

.

Relevant Pages

  • Re: PHP Skript im Internet durch c Programm starten
    ... >> Willst du ein php-Script starten oder willst Du ... ist einen Wert zum Server zu schicken und die Antwort zu parsen. ... Prev by Date: ... Next by Date: ...
    (de.comp.lang.c)
  • Re: Selective permission to write in the directory.
    ... All those, and only those, users which communicate with my server via ... your webserver has access to the file system as ... ONLY 'nobody' has permission to write and execute the directory, ... content of the directory can be changed ONLY via my php-script. ...
    (comp.lang.php)
  • include-problem
    ... execute a PHP-script on another server, and then to include the result ... On the server I have the file http://server.com/test/echo.php with the ... echo 'xyz'; ... which is output of the echo-statement in the remote file which I am ...
    (php.general)
  • Re: Selective permission to write in the directory.
    ... All those, and only those, users which communicate with my server via ... ONLY 'nobody' has permission to write and execute the directory, ... content of the directory can be changed ONLY via my php-script. ...
    (comp.lang.php)
  • Re: HTTP 403
    ... Everything seems to work OK when dealing with databases but as ... soon as I use a php-script that use $_server the browser will throw me away ...
    (comp.lang.php)