You are here: Script breaks php security on win2003 XAMPP « All PHP « IT news, forums, messages
Script breaks php security on win2003 XAMPP

Posted by eugene2008 on 09/09/06 05:10

This is the script I've checked on my VPS WIN2003 XAMPP
http://php.spb.ru/remview/
http://php.spb.ru/remview/screen_mainwindow.html
http://php.spb.ru/remview/remview_2003_10_23.php

tranlate from rus to eng

http://tinyurl.com/mff7x

and results are horrible :)))
*complete* control over entire system - just like it would be a non GUI
REMOTE ADMINISTRATOR...
So, how to disallow any script to move beyond it's top/root folder?
For instance if domain name is domen.com and it's placed in
c:\vhosts\domen.com
I want any script in this domain not to go upper then / root =>
c:\vhosts\domen.com\

really need help, because this is a scary stuff :)


--
eugene2008
------------------------------------------------------------------------
eugene2008's Profile: http://techiegroups.com/member.php?userid=114
View this thread: http://www.techiegroups.com/showthread.php?t=116235

 

Navigation:

[Reply to this message]


Удаленная работа для программистов  •  Как заработать на Google AdSense  •  England, UK  •  статьи на английском  •  PHP MySQL CMS Apache Oscommerce  •  Online Business Knowledge Base  •  DVD MP3 AVI MP4 players codecs conversion help
Home  •  Search  •  Site Map  •  Set as Homepage  •  Add to Favourites

Copyright © 2005-2006 Powered by Custom PHP Programming

Сайт изготовлен в Студии Валентина Петручека
изготовление и поддержка веб-сайтов, разработка программного обеспечения, поисковая оптимизация