What prevents me from uploading an .htaccess file and overriding the
configuration?
The real solution is, as always, validate user input.

On Jan 30, 5:08 pm, Éric Rogé <[email protected]> wrote:
> <Directory "/path/to/my/sfProject/web/uploads">
>   php_flag engine off
> </Directory>
>
> The fix could release in a .htaccess added to the uploads directory. I
> think it should be easiest way for many symfony users.

-- 
You received this message because you are subscribed to the Google Groups 
"symfony developers" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/symfony-devs?hl=en.

Reply via email to