1. Please take a little time for this simple survey! Thank you for participating!
    Dismiss Notice
  2. Dear Pleskians, please read this carefully! New attachments and other rules Thank you!
    Dismiss Notice
  3. Dear Pleskians, I really hope that you will share your opinion in this Special topic for chatter about Plesk in the Clouds. Thank you!
    Dismiss Notice

Big security problem in apache

Discussion in 'Plesk for Linux - 8.x and Older' started by luribe, May 15, 2006.

  1. luribe

    luribe Guest

    0
     
    Hi,

    I have a Plesk server with 5 clients, all with a different domain and of course a different folder in /home/httpd/vhosts.

    But every client can see the other clients folder with a simple php file like this:
    There is a way to change this? Anyone have the same problem? How we can fix that?

    Update There is a way, in php.ini set the variable disable_function to: dl,system,exec,passthru,shell_exec (and/or add the functions you want to restrict.)

    But, this could give me a problem with plesk or the application vault?
     
Loading...