From: "Urivan Saaib" <[EMAIL PROTECTED]>

>
> LOL ! Dam, forgot about that... Anyways as Daryl comments, looking for
> file type (dir, file, link,etc) and owner ?
>
> What problems you can see here ?
>


Well that would perhaps fix the scenario I suggested.

But it's still risky -- you'll be opening a whole bunch of holes you don't
know about, and then trying to plug the ones you spot. Whereas if Apache's
not running as root at all, the possibilities are hugely reduced.

Reply via email to