Security Issue

[redeye]

How can I avoid the users to read eachothers files, using php.

What I mean is this: when I have an webhostaccount on an server, I can make an php-script and can read everyone's files that they host in their home-dir. Including for instance an db.php file. Agree I have to know the exact position, but..

- openbase-dir is allready used, but i can't go further then /home

- disable php-functions as far as possible, but I can't disable all, because some common scripts like phpBB2 use those functions

Safemode is the last resort, so any other option is welcome, very welcome.

[vandal]

you need to enable the open_basedir restriction or safe mode. they should both fix that.

please see this thread:

http://www.directadmin.com/forum/showthread.php?s=&threadid=2906&highlight=openbasedir

[redeye]

Read it, thx, it works :D

[vandal]

np :D