php_novice2007 Posted September 19, 2007 Share Posted September 19, 2007 How do I prevent this? thanks~! Quote Link to comment Share on other sites More sharing options...
Orio Posted September 19, 2007 Share Posted September 19, 2007 Can you explain a bit?? Orio. Quote Link to comment Share on other sites More sharing options...
kwdrysdale Posted November 16, 2007 Share Posted November 16, 2007 I don't have a solution to the problem as I have the exact same problem, and question. Is there some way to prevent full path disclosure? For the last post, what it is, where I have seen it anyway, is if there is an error message it will show the full path of where the file is that contains the error. This gives hackers more information about the server and your file structure. So...is there anyone out there willing to share how to prevent this? Thanks. Kevin Quote Link to comment Share on other sites More sharing options...
revraz Posted November 16, 2007 Share Posted November 16, 2007 Once your code works, you want to suppress the errors with "@". Unless you mean something else. Quote Link to comment Share on other sites More sharing options...
kratsg Posted November 16, 2007 Share Posted November 16, 2007 Have you tried this? error_reporting(0); Quote Link to comment Share on other sites More sharing options...
kwdrysdale Posted November 16, 2007 Share Posted November 16, 2007 Have you tried this? error_reporting(0); I like this solution. I think it should be pretty easy to implement, since I should be able to add it at the beginning of all php files. It's amazing how much stuff there is to learn with all this!! Thanks. Kevin Quote Link to comment Share on other sites More sharing options...
PHP_PhREEEk Posted November 16, 2007 Share Posted November 16, 2007 Another security myth that needs a bit of debunking here... Full path disclosure in itself is not a security concern. Due to the generalized way many servers setup web hosting accounts, the full path itself could be guessed QUITE EASILY in a lot of cases. Anyways, to repeat... knowing the full path to your file system is NOT a security concern. It only becomes a tool for a hacker if he successfully breaches other parts of your security. If you code correctly and have reasonable security measures already in place, a potential evil-doer can do nothing armed only with full path information. PhREEEk Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.