RE: [cobalt-users] PHP Directory Listing Security Issue...

["Kai" <go@xxxxxxxxxxxx>]

This leaves PHP practically useless for file handling, and explode is an
important function that i would rather not remove.
It doesn't matter. I just thought linux might support something like this.

Ciao

-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Steve Werby
Sent: Wednesday, 27 March 2002 6:52 AM
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-users] PHP Directory Listing Security Issue...


"Nicolae Popescu Jr." <nicolaep@xxxxxxxxxxxxxxxxxx> wrote:
> I have PHP Version 4.1.2
>
> I don't have anything in my php.ini with:
> opendir() or explode().

IIRC, if you want to disable functions the directive to use is
disable_functions.  You'd need to add something like the following to
php.ini (anywhere in it):

disable_functions = opendir, explode

Please consult the PHP manual at php.net or other resources to verify.  Or
just give it a try.  If it works it's right.  <g>

--
Steve Werby
President, Befriend Internet Services LLC
http://www.befriend.com/




_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users