Hi Folks:
Gerard Onorato wrote on the PHP-GENERAL mailing list:
>
> Security Advisory DW020203-PHP
> Release: 3rd February 2002
> PHP Safe Mode Filesystem Circumvention Problem
>
> ... snip ...
>
> FIX
> Currently, no fix exists.
> ... snip ...
> A suggested fix for the PHP developers might be
The PHP developers are aware of this, and are working with MySQL to make it
safer.
it should be noted that PHP safe mode, whilst making the environment
generally safer, is not an easy-answer to webserver security. The only real
solution is to learn about better security and configuration.
--jame
2 matches
Mail list logo