Jump to content

Same Server fopen() Security Risk


sKunKbad

Recommended Posts

One of the websites that I maintain is on a server where I can fopen() anything on the server. There are a few hundred websites on there, and I don't believe I should have access to go into them, but I wanted to test so that I could improve my own security. "fopening" these files reveals ALL code, even php code / asp code. Is there a way that I can protect the site I am working on from other people "fopening"? Should I contact the host and have them do something? Server is a windows server if it makes a difference. Is this bad enough to where I should change hosts?

Link to comment
https://forums.phpfreaks.com/topic/99874-same-server-fopen-security-risk/
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.