RE: [PHP-DB] Security Issues

2004-07-13 Thread Ed Lazor
> so I've been doing a little thinking about web server security.. > > #1. Since all files on the web are 644, what is to stop someone on the > same server from copying your files to their own directory? > (specifically your database connection info) > #2. if a folder if 777, what's to stop someon

Re: [PHP-DB] Security Issues

2004-07-13 Thread John W. Holmes
Jonathan Haddad wrote: so I've been doing a little thinking about web server security.. #1. Since all files on the web are 644, what is to stop someone on the same server from copying your files to their own directory? (specifically your database connection info) #2. if a folder if 777, what's t

Re: [PHP-DB] Security Issues

2004-05-10 Thread John W. Holmes
From: "Galbreath, Mark A" <[EMAIL PROTECTED]> > Does anybody know if the security issues outlined in > > http://www.securereality.com.au/archives/studyinscarlet.txt > > are still salient or not? My boss wants a technical document outlining the > security risks of using PHP in an attempt to get it