The "Freeola Customer Forum" forum, which includes Retro Game Reviews, has been archived and is now read-only. You cannot post here or create a new thread or review on this forum.
I've noticed that if an Error occurs in a PHP Script, that it prints the Location of the Script in a way that could be a security risk:
/users/freeola/.... you know the rest.
The thing is, when an error occurs, the user can see this clearly, and they have then been given information to access your files. As this is the method of getting to your files through scripts, those type of people could do things like delete files, create loads of new ones, move them, rename then, edit them.....
..So, Andrew, is there anyway that you can change it, so that if an error occurs, the full path to the problem isn't posted???
Thanx for reading....
/users/freeola/.... you know the rest.
The thing is, when an error occurs, the user can see this clearly, and they have then been given information to access your files. As this is the method of getting to your files through scripts, those type of people could do things like delete files, create loads of new ones, move them, rename then, edit them.....
..So, Andrew, is there anyway that you can change it, so that if an error occurs, the full path to the problem isn't posted???
Thanx for reading....
THanks for replying Turbo. It is completley secure and in any case users shouldn't get any errors if the pages work, which they will if you have finished programming the site (tip: never wor on any live pages, always use copies).
Oh right.... thats cool then.
Thanx for putting my mind at ease....
Thanx for putting my mind at ease....
That path is a Linux filesystem path to your files only. All servers do this. This path cannot be accessed unless the requesting script is located in the DocumentRoot of the VirtualHost (I assume it's a virtual host) that that path belongs to. In other words, it cannot be accessed by anyone other than you, and is totally secure.
I've noticed that if an Error occurs in a PHP Script, that it prints the Location of the Script in a way that could be a security risk:
/users/freeola/.... you know the rest.
The thing is, when an error occurs, the user can see this clearly, and they have then been given information to access your files. As this is the method of getting to your files through scripts, those type of people could do things like delete files, create loads of new ones, move them, rename then, edit them.....
..So, Andrew, is there anyway that you can change it, so that if an error occurs, the full path to the problem isn't posted???
Thanx for reading....
/users/freeola/.... you know the rest.
The thing is, when an error occurs, the user can see this clearly, and they have then been given information to access your files. As this is the method of getting to your files through scripts, those type of people could do things like delete files, create loads of new ones, move them, rename then, edit them.....
..So, Andrew, is there anyway that you can change it, so that if an error occurs, the full path to the problem isn't posted???
Thanx for reading....