[PHP-WIN] Re: securing PHP on Win32

2001-09-16 Thread Erick Baum
is of it before you launch it to the world, especially > on Win32. Not too bad if you're only hosting your own files and stuff, but > can become a nightmare if you have it open to the 'public' to upload their > php scripts. > > > "Erick Baum" <[EMAIL PROT

[PHP-WIN] securing PHP on Win32

2001-09-16 Thread Erick Baum
We have been unable to secure our Windows 2000/IIS5 server from allowing people to open any file on our server that they want to if they know the path. The safe_mode doesn't really work on Windows. But I was told to use the open_basedir option in our php.ini. I added this option and it had no e

[PHP-WIN] Re: Safe mode w/ IIS4 + PHP

2001-09-16 Thread Erick Baum
I am having a similar problem with Windows2000, IIS5, and the latest stable PHP. I don't believe Safe Mode works in a Windows environment anyways, because it does not understand Windows permissions as far as ownership. However, I was told to use the open_basedir option which in php.ini. You set

[PHP-WIN] OPEN_BASEDIR

2001-08-28 Thread Erick Baum
I have specified the "open_basedir" in our php.ini file on our Windows 2000 Server running IIS5. No matter what I set open_basedir = it does not work. It will still allow me to open any file on the hard drive. I have tried specifying all of the following and it seems to have no effect: open_bas

[PHP-WIN] php and http authentication

2001-08-20 Thread Erick Baum
I think I've seen this done before, but I cannot figure out how to do it... please help if you can. I was wondering if/how you could use a PHP script to retrieve information that was on a web site protected by HTTP authentication (the little pop-up browser window asking for a username and passwor

[PHP-WIN] Restricting access to system files

2001-08-19 Thread Erick Baum
Hello, Maybe I have missed something very obvious in the setup of PHP on our Windows2000 server with IIS5. But I cannot seem to figure out how to stop people from being able to "read" any file on the system they wish by simply FOPENing the file. For instance, I tested this by writing a very sim