Hi, 

Database mean that way of handling information in an ordered way, this
is the simplest explanation I know.

And an example for a database (handler) with built-in access control is
MySQL, you can read more about MySQL at http://www.mysql.com and an
example of a database handler with not such good access control is
Microsoft Access

Enrique García Briones


-----Mensaje original-----
De: Voytsekhovskyy Alexander [mailto:[EMAIL PROTECTED] 
Enviado el: Martes, 09 de Marzo de 2004 09:53 a.m.
Para: [EMAIL PROTECTED]
Asunto: [PHP-DOC] Question about security

Goog day.

During translation http://www.php.net/manual/en/security.apache.php to
my language, i have some problems with understanding some moments:

------------
When PHP is used as an Apache module it inherits Apache's user
permissions (typically those of the "nobody" user). This has several
impacts on security and authorization. For example, if you are using
PHP to access a database, unless that database has built-in access
control, you will have to make the database accessible to the "nobody"
user. This means a malicious script could access and modify the
database, even without a username and password. It's entirely possible
that a web spider could stumble across a database administrator's web
page, and drop all of your databases. You can protect against this
with Apache authorization, or you can design your own access model
using LDAP, .htaccess files, etc. and include that code as part of
your PHP scripts.
------------

What databases need to mean? text files? And some impossible to
understand about atypical autorization?

Sorry for my english.





-- 
С уважением,
 Voytsekhovskyy                          mailto:[EMAIL PROTECTED]

Reply via email to