Re: [SM-USERS] Attachments blocked by php file upload restriction

2003-10-28 Thread Rob Prince
[EMAIL PROTECTED] said: > > I recently had someone deface the website on my server and one of the > vulnerablities they used to upload a rootkit, was from a php website on > my server that allowed file uploads to /tmp. There were other unrelated > vulnerablities that allowed them to actually run t

Re: [SM-USERS] Attachments blocked by php file upload restriction

2003-10-28 Thread Chris Hilts
> My question: Is there ANY way to selectively allow file uploads from a > select group of php files (e.g. squirrelmail) while restricting it for > all other php scripts? If you're using apache, use a .htaccess file, or stanzas to set up restrictions. -- Chris Hilts [EMAIL PROTECTED] ---

Re: [SM-USERS] Attachments blocked by php file upload restriction

2003-10-28 Thread Seth Randall
It you're running Apache, you could use a .htaccess file and change the php setting there. Seth. [EMAIL PROTECTED] said: > > I recently had someone deface the website on my server and one of the > vulnerablities they used to upload a rootkit, was from a php website on > my server that allowed file