Re: [PHP] PHP FTP a security risk?????

2003-02-11 Thread Jason Wong
On Wednesday 12 February 2003 02:54, Christopher Ditty wrote: Hello all. I have a customer that purchased on of my scripts and attempted to install it on their server. This script, among other things, FTPs a text file from a central server. When we tried to run my script, it simply stops.

Re: [PHP] PHP FTP a security risk?????

2003-02-11 Thread Reuben D. Budiardja
On Tuesday 11 February 2003 02:11 pm, Jason Wong wrote: On Wednesday 12 February 2003 02:54, Christopher Ditty wrote: Hello all. I have a customer that purchased on of my scripts and attempted to install it on their server. This script, among other things, FTPs a text file from a

Re: [PHP] PHP FTP a security risk?????

2003-02-11 Thread Christopher Ditty
Unfortunately, I can only get the file via FTP. I just want to know where this other host got it's information. Chris Reuben D. Budiardja [EMAIL PROTECTED] 02/11/03 01:35PM On Tuesday 11 February 2003 02:11 pm, Jason Wong wrote: I agree with that. It's only a (potential) problem if you're

Re: [PHP] PHP FTP a security risk?????

2003-02-11 Thread Chris Wesley
On Tue, 11 Feb 2003, Christopher Ditty wrote: errors, no nothing. I talked to his host and found out that they do not allow PHP FTP because it is a security risk. ? U, ok? I consider FTP a security risk, period. (There /are/ ways to run an FTP server securely, but I won't assume

Re: [PHP] PHP FTP a security risk?????

2003-02-11 Thread Chris Wesley
On Tue, 11 Feb 2003, Chris Wesley wrote: On Tue, 11 Feb 2003, Christopher Ditty wrote: errors, no nothing. I talked to his host and found out that they do not allow PHP FTP because it is a security risk. ? U, ok? That said ... FTP is a protocol; there's nothing stopping you

Re: [PHP] PHP FTP a security risk?????

2003-02-11 Thread Christopher Ditty
Chris, Did you read the rest of the message? It sounds like the web host is saying that someone can access PHP FTP from an outside server and hack into the server. I am not trying to start a debate on whether or not people should send passwords and userids over plain text. Yes, that is a

Re: [PHP] PHP FTP a security risk?????

2003-02-11 Thread Chris Shiflett
--- Christopher Ditty [EMAIL PROTECTED] wrote: This script, among other things, FTPs a text file from a central server. When we tried to run my script, it simply stops. No errors, no nothing. I talked to his host and found out that they do not allow PHP FTP because it is a security risk.

RE: [PHP] PHP FTP a security risk?????

2003-02-11 Thread James E Hicks III
script that they have written. James Hicks -Original Message- From: Christopher Ditty [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 11, 2003 3:34 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [PHP] PHP FTP a security risk? Chris, Did you read the rest of the message

Re: [PHP] PHP FTP a security risk?????

2003-02-11 Thread Chris Wesley
On Tue, 11 Feb 2003, Christopher Ditty wrote: Chris, Did you read the rest of the message? It sounds like the web Yes, I read your entire message. host is saying that someone can access PHP FTP from an outside server and hack into the server. That's precisely NOT what the hosting provider

Re: [PHP] PHP FTP a security risk?????

2003-02-11 Thread Jason Wong
On Wednesday 12 February 2003 07:46, Chris Wesley wrote: On Tue, 11 Feb 2003, Christopher Ditty wrote: Chris, Did you read the rest of the message? It sounds like the web Yes, I read your entire message. host is saying that someone can access PHP FTP from an outside server and hack into

Re: [PHP] PHP FTP a security risk?????

2003-02-11 Thread Chris Wesley
On Wed, 12 Feb 2003, Jason Wong wrote: On Wednesday 12 February 2003 07:46, Chris Wesley wrote: You access an FTP server with a user name and a password to retrieve a file via PHP FTP. The user name and password is the same that grants you access to your hosting providers server.

Re: [PHP] PHP FTP a security risk?????

2003-02-11 Thread Jason Wong
On Wednesday 12 February 2003 14:02, Chris Wesley wrote: Why? What's a better argument? It's certainly just a piece of a much larger argument, but avoiding a full-fledged lecture outside the immediate context of the original question (and trying to keep it related to PHP somehow) makes it

Re: [PHP] PHP FTP a security risk?????

2003-02-11 Thread Chris Wesley
On Wed, 12 Feb 2003, Jason Wong wrote: On Wednesday 12 February 2003 14:02, Chris Wesley wrote: Why? What's a better argument? It's certainly just a piece of a much larger argument, but avoiding a full-fledged lecture outside the immediate context of the original question (and trying to

Re: [PHP] PHP FTP a security risk?????

2003-02-11 Thread Jason Wong
On Wednesday 12 February 2003 15:00, Chris Wesley wrote: If you assume the users use FTP for uploads, then you have to assume the hosting company is a band of hypocrites. So the conclusion for the OP is simple: If the host is allowing you to use FTP to upload your site then they are a bunch