Re: Deny Access To configuration file using php scripts

Hi,

Have a look at php's safe-mode :

http://www.php.net/features.safe-mode

You can easily restrict any virtual host to some dir.

You may also have a look at the "disable_functions" php.ini directive 
which disable any function you don't want.

Best regards.

raT wrote:

> Hello i have a web server and i have a major problem
>
> some of my users are trying to find my pass for my mysql database.
>
> the first thing they do is a
> system ('cat /var/www/path to config file');
> inside a php script
>
> my problem is to deny this file from being read throu the script since
> the apache deamon runs as nobody
> and it has to have read permision to the configuration file.
>
> my users have shell acount and can create files in the public_html folder.
> any help?
> snif!
>
> thanks in advance.
>