From owner-freebsd-isp Thu Jan 27 11:53:25 2000 Delivered-To: freebsd-isp@freebsd.org Received: from outlier.axl.net (outlier.axl.net [216.66.11.20]) by hub.freebsd.org (Postfix) with SMTP id A772F14DF6 for ; Thu, 27 Jan 2000 11:53:22 -0800 (PST) (envelope-from matt@axl.net) Received: (qmail 56133 invoked from network); 27 Jan 2000 19:52:11 -0000 Received: from ws-01.matthennigus.lightningdsl.net (HELO sinister) (216.66.30.66) by outlier.axl.net with SMTP; 27 Jan 2000 19:52:11 -0000 Reply-To: From: "Matthew B. Henniges" To: "Paulo Fragoso" , Subject: RE: PHP security Date: Thu, 27 Jan 2000 14:54:29 -0500 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) Importance: Normal In-Reply-To: X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org those go in /usr/local/etc/php3.ini, not the apache config Matthew B. Henniges Axl.net Communications http://www.axl.net (203) 552-1714 > -----Original Message----- > From: owner-freebsd-isp@FreeBSD.ORG > [mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of Paulo Fragoso > Sent: Thursday, January 27, 2000 2:31 PM > To: freebsd-isp@freebsd.org > Subject: PHP security > > > Hi, > > I would like to limit access to php scripts, I'm trying to set into > httpd.conf: > > php3_safe_mode on > php3_doc_root /some_dir/data/htdocs/php > > but it don't work. > > When I access a simple php3 script in /some_dir/data/htdocs my web server > run that script fine. > > Is possible using "php3_safe" and "php3_doc_root" restrict php3 scripts > under /some_dir/data/htdocs/php? Or is there other way to make this? > > I'm using: Apache/1.3.11 (Unix) mod_ssl/2.5.0 OpenSSL/0.9.4 PHP/3.0.14 > with FreeBSD 3.4. > > Thanks, > Paulo. > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message