Re: PHP Security Risk?

[Greg Donald <destiney () gmail com>]

On Fri, 3 Dec 2004 15:48:32 +0100 (CET), John GALLET
<john.gallet () wanadoo fr> wrote:
> The real danger is that this security part is left te be handled by the
> *programmer* not the sysadmin.

Wrong.  Sysadmins have full control over the httpd.conf and the
php.ini files.  Any functions, classes, file extensions, execution
access, etc., that he/she feels unsafe may be disabled quite easily.

Web server security involving PHP is certainly not 'left to be
handled' only by the programmer.  The sysadmin has many facilities to
ensure a secure environment exists.


-- 
Greg Donald
Zend Certified Engineer
http://gdconsultants.com/
http://destiney.com/