PLUG site incident last night

Edward Norton r00t3d at gmail.com
Mon Jan 1 18:40:01 MST 2007


On 1/1/07, keith smith <klsmith2020 at yahoo.com> wrote:
>
> Thanks, I'll check that out.  I just read in a forum that if you put a
> php.ini in the home directory (I assume DocumentRoot) that PHP reads that
> one first.
>
> Seems like a security risk to do so.
>
> See http://www.go4expert.com/forums/showthread.php?t=397
>
> could that be so?
>
> Thanks,
> Keith


It seems possible to do so, however I've never tried it myself. I'd have to
agree with you on the security risk. It doesn't sound like a good idea to
have the php conf in your documentroot.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.PLUG.phoenix.az.us/pipermail/plug-discuss/attachments/20070101/89400ca4/attachment.htm 


More information about the PLUG-discuss mailing list