PHP-保护站点免受具有777权限的文件夹的侵害 [英] PHP - Protecting site from folders with 777 permissions

问题描述

通常，我尝试将文件夹设置为具有775权限，但是某些网络托管拒绝让PHP将文件写入或移动到任何文件夹，除非它具有777权限(它可以是open_dir或安全模式).

Usually, I try to set my folders to have permission 775, but some web-hosting refuses to let PHP writes or move files to any folders unless it has permission 777 (it may be open_dir or safe mode).

万一恶意PHP脚本已上传到该文件夹​​中，是否有任何方法可以阻止从此类文件夹中运行任何PHP文件?

Are there any ways to prevent any PHP files from being ran from such folders, in case a malicious PHP script has been uploaded there?

推荐答案

如果恶意PHP脚本已上传到该文件夹​​，是否有任何方法可以防止从此类文件夹中运行任何PHP文件?

Are there any ways to prevent any PHP files from being ran from such folders, in case a malicious PHP script has been uploaded there?

您可以为该目录禁用PHP.参见 此答案.

You could disable PHP for that directory. See this answer.

这篇关于PHP-保护站点免受具有777权限的文件夹的侵害的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！