On Mon, 2002-02-04 at 22:23, James E. Flemer wrote: > Comments on this? I am going to take a look at the code in > the mysql extension, and at the code in mysql as well > tomorrow. Not sure if this is directly a PHP problem (vs a > mysql problem), but it is something that PHP *could* block > it seems.
IIAR, this is not really a weakness, merely a configuration issues. Wou can deny MySQL users access to the file based functions very easily. REVOKE FILE ON db TO user... Will do a bit more research to ensure that this is truly bogus. --zak -- For technical support contracts, goto https://order.mysql.com/ __ ___ ___ ____ __ / |/ /_ __/ __/ __ \/ / Zak Greant <[EMAIL PROTECTED]> / /|_/ / // /\ \/ /_/ / /__ MySQL AB /_/ /_/\_, /___/\___\_\___/ Calgary, Canada <___/ www.mysql.com -- PHP Development Mailing List <http://www.php.net/> To unsubscribe, visit: http://www.php.net/unsub.php
