Jump to content

Accessing upper directory...


dev99

Recommended Posts

After install php and apache on a debian server i found out that people who upload files under /var/www/users/username

username is the users foldername... can access upper directory.. so they can see and edit files everywhere on the system...
How can i prevent this? only way i found was to change open_basedir = . under php.ini but that also blocks from installation of many php scripts...
Thanks
Link to comment
https://forums.phpfreaks.com/topic/7368-accessing-upper-directory/
Share on other sites

  • 3 weeks later...

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.