Re: [PHP] PHP security in a hosting environment

2004-04-07 Thread Chris Shiflett
--- Ben Joyce <[EMAIL PROTECTED]> wrote: > one of my clients whom we host a website for has expressed interest > in writing their own php/mySQL applications for their site. > > i've been looking in to the security implications of offering this > service. How are you not offering it now? Can the c

Re: [PHP] PHP security in a hosting environment

2004-04-07 Thread John W. Holmes
From: "Ben Joyce" <[EMAIL PROTECTED]> > one of my clients whom we host a website for has expressed interest in > writing their own php/mySQL applications for their site. > > i've been looking in to the security implications of offering this service. > My concerns are that the client *could* use a

Re: [PHP] PHP security in a hosting environment

2004-04-07 Thread Raditha Dissanayake
Ben Joyce wrote: hi. one of my clients whom we host a website for has expressed interest in writing their own php/mySQL applications for their site. i've been looking in to the security implications of offering this service. My concerns are that the client *could* use a php script to access parts

RE: [PHP] PHP security in a hosting environment

2004-04-07 Thread Hawkes, Richard
My suggestion would be to run the PHP Web Server on a different server to where you are retrieving your files. The file server can then define its own polices of what you can read/write to etc. Your web server can then map a drive to the file server, and anybody writing PHP scripts won't be able to