Re: [PHP] restricting filesystem access

From: paragasu@xxxxxxxxx (paragasu)
Date: Mon, 31 Mar 2008 19:11:25 +0800

Thank you for the answer.

I am running my site on a shared server, but I can overwrite the options
in the php.ini file. Unfortunately php runs as my user, so changing the
permissions to 644 doesn't work, php is still able to write anything.

Gabor

ok.. your hosting enable the php suexec. i afraid there is not much you can
do to modified the php.ini. you may use ini_set() or the .htaccess to
override
the value anyway.

one thing you can do. sanitize input and make sure you code good :p

References:
- restricting filesystem access
  - From: Hamar Gábor
- Re: [PHP] restricting filesystem access
  - From: paragasu
- Re: [PHP] restricting filesystem access
  - From: Hamar Gábor

Prev by Date: Re: [PHP] LDAP in php
Next by Date: RE: [PHP] question about select tag in php
Previous by thread: Re: [PHP] restricting filesystem access
Next by thread: Re: [PHP] restricting filesystem access
Index(es):
- Date
- Thread

Relevant Pages

PHP import_request_variables() arbitrary variable overwrite
... PHP import_request_variablesarbitrary variable overwrite ... GLOBALS programmers wrote applications using this input method, ... E_NOTICE level error if you specify no prefix, ...
(Bugtraq)
[Full-disclosure] PHP import_request_variables() arbitrary variable overwrite
... PHP import_request_variablesarbitrary variable overwrite ... GLOBALS programmers wrote applications using this input method, ... E_NOTICE level error if you specify no prefix, ...
(Full-Disclosure)
PHP parse_str() arbitrary variable overwrite
... PHP parse_strarbitrary variable overwrite ... This type of vulnerability can open a door to many vulnerabilities, ... that's why it's difficult to define the risk level. ...
(Bugtraq)
Re: permission denied - can files be locked in linux?
... > trying to modify templates in a PHP application on the live server. ... Is it possible the PHP app could be locking them ... Remember that when you overwrite with something like 'mv newfile ...
(alt.os.linux)
Re: permission denied - can files be locked in linux?
... ]> trying to modify templates in a PHP application on the live server. ... ]> I cannot overwrite or delete them, even using the app provided by the ... Is it possible the PHP app could be locking them ... You may not have permission to do that. ...
(alt.os.linux)