We've expanded our news coverage and improved our search! Visit news.oreilly.com for the latest or search for all things across O'Reilly!
advertisement

Subject:   no PHP security on shared web servers
Date:   2003-09-02 12:37:56
From:   anonymous2
Response to: no PHP security on shared web servers

You can use a client like phpshell, and can type in:


cat /home/clientXYZ/*.php


and you will probably screens php code from clientXYZ's folder.


I agree with the original author. Shared hosting extremely insecure.