[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] <PHP Off Topic>
- Subject: Re: [cobalt-users] <PHP Off Topic>
- From: "Carrie Bartkowiak" <ravencarrie@xxxxxxxx>
- Date: Tue Jun 19 04:45:12 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
> > Being a network\server guy and not a developer I don't know a
whole
> > bunch about PHP on Cobalts or any other boxes.
>
> Running PHP is safe mode is good idea to do although in my opinion
it is
> quite restrictive.
*nods*
It is pretty restrictive. Not running it in safe mode allows you to do
all kinds of dynamic things; but those things could also be used for
bad purposes.
If you don't have experience with PHP, do you have experience with
CGI? The same commands that can be run through a CGI script can be run
through PHP. You could pass simple commands to the server and get back
information; you could list off directory
structures/permissions/groups etc. anywhere on the server, and read
files as well (if they've got the proper permissions).
It *can* be used for bad purposes, but really any dynamic tool can be
used for good or bad. You've got to weigh it out yourself and decide.
PHP is quickly becoming the language of choice for scripting because
it's faster, more secure, and blends with HTML far easier than CGI w/
Perl.
CarrieB