Re: [PHP] secure upload file

2006-05-03 Thread Anthony Ettinger
disabled indexes in .htaccess. On 5/3/06, Richard Lynch <[EMAIL PROTECTED]> wrote: On Tue, May 2, 2006 8:12 pm, kristianto adi widiatmoko wrote: > how to secure folder upload file since the privilege of this folder is > 777 > > is any method to create a secure upload file ?? There is no such

Re: [PHP] secure upload file

2006-05-03 Thread Richard Lynch
On Tue, May 2, 2006 8:12 pm, kristianto adi widiatmoko wrote: > how to secure folder upload file since the privilege of this folder is > 777 > > is any method to create a secure upload file ?? There is no such thing as "total security" Here are things you can do to improve security: 1. chown the

Re: [PHP] secure upload file

2006-05-02 Thread Wolf
In Apache's Config: Options None AllowOverride Options Order allow,deny Allow from all RedirectPermanent * "somewhere else" By using that and uploading to the upload_dir via another script, you create a black hole. Stuff comes in but can't be accessed from the outside world afterwards. W