[EMAIL PROTECTED] said:
>
> I recently had someone deface the website on my server and one of the
> vulnerablities they used to upload a rootkit, was from a php website on
> my server that allowed file uploads to /tmp. There were other unrelated
> vulnerablities that allowed them to actually run t
> My question: Is there ANY way to selectively allow file uploads from a
> select group of php files (e.g. squirrelmail) while restricting it for
> all other php scripts?
If you're using apache, use a .htaccess file, or stanzas to
set up restrictions.
--
Chris Hilts
[EMAIL PROTECTED]
---
It you're running Apache, you could use a .htaccess file and change the
php setting there.
Seth.
[EMAIL PROTECTED] said:
>
> I recently had someone deface the website on my server and one of the
> vulnerablities they used to upload a rootkit, was from a php website on
> my server that allowed file