Re: [PHP] PHP / MYSQL security bug

2002-02-05 Thread Analysis and Solutions
Hi Folks: Gerard Onorato wrote on the PHP-GENERAL mailing list: > > Security Advisory DW020203-PHP > Release: 3rd February 2002 > PHP Safe Mode Filesystem Circumvention Problem > > ... snip ... > > FIX > Currently, no fix exists. > ... snip ... > A suggested fix for the PHP developers might be

RE: [PHP] PHP / MYSQL security bug

2002-02-05 Thread James Cox
The PHP developers are aware of this, and are working with MySQL to make it safer. it should be noted that PHP safe mode, whilst making the environment generally safer, is not an easy-answer to webserver security. The only real solution is to learn about better security and configuration. --jame