Topic awaiting preservation: security question

you know your absolute server path? /home/machine/user/domain.com or whatever?

I have a PHP script that is looking into a directory and pulling files from there and stuffing links into a combo box, the links are as the path above. It works but is it a good idea? How to make it give a different path for the link if it's bad practice?

grazi

Jason

what is your problem/what are you trying to do?

as you can only run listing from /home/machine/user/domain.com and up, just suppress the base folder from being displayed, and when you want to process the path re-append the base path,

so:
$basepath= '/home/machine/user/domain.com'
and the links and values are like:
index.htm , images/spacer.gif, etc....

No not a good idea.

You are just showing people path info that they don't need to know. This opens up some security issues which may allow hackers access to find data and info easier.

lallous' suggestion is best



:[ Computers let you make more mistakes faster than any other invention in human history, with the possible exceptions of handguns and tequila. ]:

actually, $DOCUMENT_ROOT should point to your root doc folder. You can just append that. This makes it easier if you ever move the site to another server with a different folder structure. So, use something like
"$DOCUMENT_ROOT/scripts/script.php", and that would point to "/home/machine/user/domain.com/scripts/script.php"

excellent, cookies all round, thanks

Jason