Re: Forum displays PHP code, not website

Path	csiph.com!usenet.pasdenom.info!weretis.net!feeder4.news.weretis.net!feeder2.ecngs.de!ecngs!feeder.ecngs.de!217.188.199.168.MISMATCH!takemy.news.telefonica.de!telefonica.de!newsfeed.arcor.de!newsspool3.arcor-online.net!news.arcor.de.POSTED!not-for-mail
Content-Type	text/plain; charset="UTF-8"
Message-ID	<1447341.oOGUtdWV9S@PointedEars.de> (permalink)
From	Thomas 'PointedEars' Lahn <PointedEars@web.de>
Reply-To	Thomas 'PointedEars' Lahn <php@PointedEars.de>
Organization	PointedEars Software (PES)
Date	Sat, 24 Mar 2012 10:35:22 +0100
User-Agent	KNode/4.4.11
Content-Transfer-Encoding	8Bit
Subject	Re: Forum displays PHP code, not website
Newsgroups	comp.lang.php
References	<jkdtdr$ktn$1@dont-email.me> <jkdv3n$s61$1@dont-email.me> <jke5pr$ovd$1@dont-email.me> <18771947.EYfduKq909@PointedEars.de> <9t1h7dFqr5U1@mid.uni-berlin.de> <jkg6cn$mjd$1@dont-email.me> <jkgmqn$ena$1@dont-email.me> <luadnd5tlIq4Y_bSnZ2dnUVZ_q2dnZ2d@posted.internetamerica>
Followup-To	comp.lang.php
MIME-Version	1.0
Lines	34
NNTP-Posting-Date	24 Mar 2012 10:35:24 CET
NNTP-Posting-Host	182a5bc0.newsspool1.arcor-online.net
X-Trace	DXC=17;Sb;RUZC2_A0jCfgHO6>ic==]BZ:af>4Fo<]lROoR1<`=YMgDjhg2l<2;WLh_V17DZm8W4\YJN<J`:FmdeL>K06JDa4d]ka`5<FWA@AeH9R7
X-Complaints-To	usenet-abuse@arcor.de
Xref	csiph.com comp.lang.php:5212

Followups directed to: comp.lang.php

Show key headers only | View raw

Gordon Burditt wrote:

> P E Schoen wrote:
>> http://www.muttleydog.com/RandomQuoteImage.php
> 
> Using OS file permissions and ownership, can Apache/PHP read it?
> (Apache has a specific OS user it runs as, typically something like
> httpd, apache, or www.  Hopefully *not* root).
> 
> […]
> - If the answer is NO, then Apache/PHP can't read it, and therefore
>   can't use it, and unless it's good for something unrelated to
>   Apache/PHP, things would probably be more secure if you just
>   DELETE it.

ACK :)

> [snipped because of Full ACK]
> 
> An additional protection is that the database cannot be connected to
> from the Internet at large, enforced by a firewall.

It is more secure if the database server also does not accept connections 
from outside the server-local network.  This is the default for recent 
versions of MySQL Server (cf. LAMP/WAMP).  Network-local PHP-based 
applications like phpMyAdmin can still access the database then.


PointedEars
-- 
var bugRiddenCrashPronePieceOfJunk = (
    navigator.userAgent.indexOf('MSIE 5') != -1
    && navigator.userAgent.indexOf('Mac') != -1
)  // Plone, register_function.js:16

Thread

Forum displays PHP code, not website "P E Schoen" <paul@peschoen.com> - 2012-03-21 20:57 -0400
  Re: Forum displays PHP code, not website Dave Pyles <dave@user.invalid> - 2012-03-21 21:26 -0400
    Re: Forum displays PHP code, not website "P E Schoen" <paul@peschoen.com> - 2012-03-21 23:20 -0400
      Re: Forum displays PHP code, not website "J.O. Aho" <user@example.net> - 2012-03-22 06:46 +0100
      Re: Forum displays PHP code, not website "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-03-22 10:29 +0100
      Re: Forum displays PHP code, not website Erwin Moller <erwinmollerusenet@xs4all.nl> - 2012-03-22 10:41 +0100
      Re: Forum displays PHP code, not website Tim Streater <timstreater@greenbee.net> - 2012-03-22 11:12 +0000
      Re: Forum displays PHP code, not website The Natural Philosopher <tnp@invalid.invalid> - 2012-03-22 11:30 +0000
      Re: Forum displays PHP code, not website Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2012-03-22 20:38 +0100
        Re: Forum displays PHP code, not website "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-03-22 21:43 +0100
          Re: Forum displays PHP code, not website The Natural Philosopher <tnp@invalid.invalid> - 2012-03-22 21:25 +0000
          Re: Forum displays PHP code, not website Jerry Stuckle <jstucklex@attglobal.net> - 2012-03-22 17:42 -0400
            Re: Forum displays PHP code, not website "P E Schoen" <paul@peschoen.com> - 2012-03-22 22:23 -0400
              Re: Forum displays PHP code, not website Jerry Stuckle <jstucklex@attglobal.net> - 2012-03-22 22:51 -0400
              Re: Forum displays PHP code, not website gordonb.vi9et@burditt.org (Gordon Burditt) - 2012-03-22 23:37 -0500
                Re: Forum displays PHP code, not website "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-03-23 18:13 +0100
                Re: Forum displays PHP code, not website "P E Schoen" <paul@peschoen.com> - 2012-03-23 21:07 -0400
                Re: Forum displays PHP code, not website Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2012-03-24 10:44 +0100
                Re: Forum displays PHP code, not website Jerry Stuckle <jstucklex@attglobal.net> - 2012-03-24 09:07 -0400
                Re: Forum displays PHP code, not website Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2012-03-24 10:35 +0100
              Re: Forum displays PHP code, not website Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2012-03-24 10:24 +0100

csiph-web