Apache and home directories (file browser).

Juan Jose Sanchez Mesa juanjo.listas at dobleJ.net
Mon Feb 16 14:00:38 PST 2004


>
> What happens when someone else loads up the same type of package.  They can
> then go scrolling through everyone else's directories.
>

In PHP, use safe_mode to avoid this. 

>
> /home/joe/access_list     <---  Access list for Joe's .htaccess files
> /home/tim/public_html/file_add.php  <--  Some script Tim has in his
> directory
>

If you set open_base_dir value to '/home/tim/public_html/', the PHP executed in this vhost, can't access any directory/file below it.





More information about the freebsd-isp mailing list