RE: [PHP] Restrict uploaded scripts

2006-06-10 Thread Mathias Bundgaard Svesson
Would it then be posible to restrict it in some other way, for example using chroot? Or do I just have to make sure that the modules come from a source that I trust or look through the code? fre, 09 06 2006 kl. 10:47 -0400, skrev Jim Moseby: Wouldn't it even be posible, if the script

Re: [PHP] Restrict uploaded scripts

2006-06-09 Thread tedd
Mathias: So what's wrong with either naming each file with a unique name or placing each file in a unique folder? If it's unique, then how can they overwrite it? I must not be understanding what you want. tedd At 7:24 AM +0200 6/9/06, Mathias Bundgaard Svesson wrote: Wouldn't they still

RE: [PHP] Restrict uploaded scripts

2006-06-09 Thread Jim Moseby
Wouldn't they still be able to overwrite each other? I don't think I expressed myself clearly. The point of the protection is to keep the scripts from overwriting each other on purpose. It was a protection that would make it posible to upload scripts, even if you were not completly sure

RE: [PHP] Restrict uploaded scripts

2006-06-09 Thread Mathias Bundgaard Svesson
Wouldn't it even be posible, if the script couldn't be run directly, but had to be run through require or something like that? fre, 09 06 2006 kl. 08:38 -0400, skrev Jim Moseby: Wouldn't they still be able to overwrite each other? I don't think I expressed myself clearly. The point of the

RE: [PHP] Restrict uploaded scripts

2006-06-09 Thread Jim Moseby
Wouldn't it even be posible, if the script couldn't be run directly, but had to be run through require or something like that? Require just includes the code inline. It still runs on the webserver as the server user as if it were one big script. I think you would have to sanitize the

[PHP] Restrict uploaded scripts

2006-06-08 Thread Mathias Bundgaard Svesson
Hi! I'm trying to create a CMS where it should be posible to upload script modules. Those modules should mostly be made by myself, but it is posible for others to create scripts too. My question is, is it posible to restrict the modules to their own directory so they don't overwrite some of the

Re: [PHP] Restrict uploaded scripts

2006-06-08 Thread chris smith
On 6/8/06, Mathias Bundgaard Svesson [EMAIL PROTECTED] wrote: Hi! I'm trying to create a CMS where it should be posible to upload script modules. Those modules should mostly be made by myself, but it is posible for others to create scripts too. My question is, is it posible to restrict the

Re: [PHP] Restrict uploaded scripts

2006-06-08 Thread Mathias Bundgaard Svesson
Restrict them not to overwrite other modules or overwrite the CMS itself. Each module should have it's own directory, and it shouldn't be allowed to change anything outside it. tor, 08 06 2006 kl. 21:49 +1000, skrev chris smith: On 6/8/06, Mathias Bundgaard Svesson [EMAIL PROTECTED] wrote: Hi!

Re: [PHP] Restrict uploaded scripts

2006-06-08 Thread tedd
At 10:37 PM +0200 6/8/06, Mathias Bundgaard Svesson wrote: Restrict them not to overwrite other modules or overwrite the CMS itself. Each module should have it's own directory, and it shouldn't be allowed to change anything outside it. tor, 08 06 2006 kl. 21:49 +1000, skrev chris smith: On

Re: [PHP] Restrict uploaded scripts

2006-06-08 Thread Mathias Bundgaard Svesson
Wouldn't they still be able to overwrite each other? I don't think I expressed myself clearly. The point of the protection is to keep the scripts from overwriting each other on purpose. It was a protection that would make it posible to upload scripts, even if you were not completly sure they were