betz Mon Jan 26 08:52:19 2004 EDT
Modified files: /phpdoc/en/security index.xml intro.xml Log: split also the intro from index.xml. Thanks Goba http://cvs.php.net/diff.php/phpdoc/en/security/index.xml?r1=1.67&r2=1.68&ty=u Index: phpdoc/en/security/index.xml diff -u phpdoc/en/security/index.xml:1.67 phpdoc/en/security/index.xml:1.68 --- phpdoc/en/security/index.xml:1.67 Mon Jan 26 08:22:25 2004 +++ phpdoc/en/security/index.xml Mon Jan 26 08:52:18 2004 @@ -1,44 +1,9 @@ <?xml version="1.0" encoding="iso-8859-1"?> -<!-- $Revision: 1.67 $ --> +<!-- $Revision: 1.68 $ --> <!-- Last Revision before split: 1.66 --> <chapter id="security.index"> <title>Security</title> - - <simpara> - PHP is a powerful language and the interpreter, whether included - in a web server as a module or executed as a separate - <acronym>CGI</acronym> binary, is able to access files, execute - commands and open network connections on the server. These - properties make anything run on a web server insecure by default. - PHP is designed specifically to be a more secure language for - writing CGI programs than Perl or C, and with correct selection of - compile-time and runtime configuration options, and proper coding - practices, it can give you exactly the combination of freedom and - security you need. - </simpara> - <simpara> - As there are many different ways of utilizing PHP, there are many - configuration options controlling its behaviour. A large - selection of options guarantees you can use PHP for a lot of - purposes, but it also means there are combinations of these - options and server configurations that result in an insecure - setup. - </simpara> - <simpara> - The configuration flexibility of PHP is equally rivalled by the - code flexibility. PHP can be used to build complete server - applications, with all the power of a shell user, or it can be used - for simple server-side includes with little risk in a tightly - controlled environment. How you build that environment, and how - secure it is, is largely up to the PHP developer. - </simpara> - <simpara> - This chapter starts with some general security advice, explains - the different configuration option combinations and the situations - they can be safely used, and describes different considerations in - coding for different levels of security. - </simpara> - + &security.intro; &security.general; &security.cgi-bin; &security.apache; http://cvs.php.net/diff.php/phpdoc/en/security/intro.xml?r1=1.1&r2=1.2&ty=u Index: phpdoc/en/security/intro.xml diff -u phpdoc/en/security/intro.xml:1.1 phpdoc/en/security/intro.xml:1.2 --- phpdoc/en/security/intro.xml:1.1 Mon Jan 26 08:22:25 2004 +++ phpdoc/en/security/intro.xml Mon Jan 26 08:52:18 2004 @@ -1,3 +1,59 @@ <?xml version="1.0" encoding="iso-8859-1"?> -<!-- $Revision: 1.1 $ --> +<!-- $Revision: 1.2 $ --> <!-- splitted from ./index.xml, last change in rev 1.66 --> + <simpara> + PHP is a powerful language and the interpreter, whether included + in a web server as a module or executed as a separate + <acronym>CGI</acronym> binary, is able to access files, execute + commands and open network connections on the server. These + properties make anything run on a web server insecure by default. + PHP is designed specifically to be a more secure language for + writing CGI programs than Perl or C, and with correct selection of + compile-time and runtime configuration options, and proper coding + practices, it can give you exactly the combination of freedom and + security you need. + </simpara> + <simpara> + As there are many different ways of utilizing PHP, there are many + configuration options controlling its behaviour. A large + selection of options guarantees you can use PHP for a lot of + purposes, but it also means there are combinations of these + options and server configurations that result in an insecure + setup. + </simpara> + <simpara> + The configuration flexibility of PHP is equally rivalled by the + code flexibility. PHP can be used to build complete server + applications, with all the power of a shell user, or it can be used + for simple server-side includes with little risk in a tightly + controlled environment. How you build that environment, and how + secure it is, is largely up to the PHP developer. + </simpara> + <simpara> + This chapter starts with some general security advice, explains + the different configuration option combinations and the situations + they can be safely used, and describes different considerations in + coding for different levels of security. + </simpara> + + +<!-- Keep this comment at the end of the file +Local variables: +mode: sgml +sgml-omittag:t +sgml-shorttag:t +sgml-minimize-attributes:nil +sgml-always-quote-attributes:t +sgml-indent-step:1 +sgml-indent-data:t +indent-tabs-mode:nil +sgml-parent-document:nil +sgml-default-dtd-file:"../../manual.ced" +sgml-exposed-tags:nil +sgml-local-catalogs:nil +sgml-local-ecat-files:nil +End: +vim600: syn=xml fen fdm=syntax fdl=2 si +vim: et tw=78 syn=sgml +vi: ts=1 sw=1 +-->