PDA

View Full Version : Securing PHP and server root



sirbrent
04-14-2008, 03:53 PM
hello :)

I have just given my friends band a small chunk of space on my Host Monster account, they needed a home for their domain for a few months until they find their own solution.

Their setup is the default for new/imported domains where they have a subdirectory with their domain name in my servers public_html folder.

My only concern is that they are having someone code them a website using PHP and i want to do what i can to secure my server. I know that using PHP someone can reach below their domains subdirectory and even below my public_html folder, is there a simple way i can prevent their domain from doing this??

sirbrent
04-16-2008, 05:58 PM
no suggestions, eh?
:-(

r2b2
04-16-2008, 08:33 PM
I don't think so as all the PHP scripts run from your account run under the same user id and therefore have access to anything that your account does.