You don't want to change apache to parse html files as php3 files.  This
can present a security risk if more than one person shares your machine.
This allows people to run php3 scripts that copy any readable file on the
server and present that file to themselves by placing a .html page up.

  This is not a horrible risk, but a risk.  You can limit which
directories that you allow php3 scripts to run in.  This is what you
should do, and you should force the pages to be php3 pages.  php3 can be a
mixture of standard html pages and php3 script.


On Tue, 7 Mar 2000, Torben Tretau wrote:

> 
> Hi Jean-Michel!
> 
> Thanks for your hint. With naming those files whatever.php3 
> it worked.. 
> So i have to add something to parse also html-files, sorry,
> thought that this is the standard situation. But now i got it..
> 
> Bye,

Reply via email to