Deny Access To configuration file using php scripts
raT <[email protected]>
| Newsgroups | gmane.comp.security.linux |
|---|---|
| Message-ID | <[email protected]> |
Hello i have a web server and i have a major problem
some of my users are trying to find my pass for my mysql database.
the first thing they do is a
system ('cat /var/www/path to config file');
inside a php script
my problem is to deny this file from being read throu the script since
the apache deamon runs as nobody
and it has to have read permision to the configuration file.
my users have shell acount and can create files in the public_html folder.
any help?
snif!
thanks in advance.
--
---
-=| PrivaCy Is A LiE |=-