Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.php > #10031

Re: Sandbox

From "J.O. Aho" <user@example.net>
Newsgroups comp.lang.php
Subject Re: Sandbox
Date 2013-07-05 18:24 +0200
Message-ID <b3oa93Fbn7U1@mid.individual.net> (permalink)
References <7a68d12f-b9f2-4367-b373-f6be14b9994b@googlegroups.com> <kr6dlm$94g$1@dont-email.me>

Show all headers | View raw


On 05/07/13 14:25, Jerry Stuckle wrote:
> On 7/5/2013 7:38 AM, sanjayrathod273@gmail.com wrote:
>> HEy guys Help me
>>
>> I want to use sandbox for my site's security. below is the link of
>> method which i want to use http://php.net/manual/en/runkit.sandbox.php.
>>
>> but when i am run the code of that page it says sandbox class not
>> defined.
>> so anyone can guide me through this step by step.
>> Please help me my site has down due to hacking. i want to use for this
>> site
>> http://web.guru99.com/demo-editor-php/
>>
>
> Look at the documentation - you need the runkit PECL class.  But that
> has not been updated for seven years and will not compile with PHP
> versions > 5.2.  It looks like you're out of luck.
>
> But then while I think what you're trying to do is admirable, I don't
> think you'll be able to stop hacking without pretty much crippling your
> users.  Anyone developing (or learning) PHP should have their own
> development environment, anyway.
>

There are other options to "sandbox" the users, suExec will give you 
some capabilities and then on you can also run the apache in a chroot 
environment. This way you can limit the access through the webserver to 
the rest of the server environment and limit the sites from accessing 
each others data. I usually apply the suhosin to the php and set a bit 
limitation that way too. Doing all that you need of course a Linux/Unix 
server.

-- 

  //Aho

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Sandbox sanjayrathod273@gmail.com - 2013-07-05 04:38 -0700
  Re: Sandbox Jerry Stuckle <jstucklex@attglobal.net> - 2013-07-05 08:25 -0400
    Re: Sandbox "J.O. Aho" <user@example.net> - 2013-07-05 18:24 +0200
      Re: Sandbox Jerry Stuckle <jstucklex@attglobal.net> - 2013-07-05 12:53 -0400
        Re: Sandbox "J.O. Aho" <user@example.net> - 2013-07-05 19:33 +0200
          Re: Sandbox Denis McMahon <denismfmcmahon@gmail.com> - 2013-07-05 18:23 +0000
          Re: Sandbox Jerry Stuckle <jstucklex@attglobal.net> - 2013-07-05 15:07 -0400
            Re: Sandbox "J.O. Aho" <user@example.net> - 2013-07-05 21:20 +0200

csiph-web