Re: [PHP] question about security

2003-11-21 Thread John W. Holmes
Alan Fullmer wrote: Is php capable of recognizing things such as in a text box, someone were to put and display say, variables? No, not normally. If you just display the code, it'll show as plain PHP code and not be run. However, if it makes its way into an include file or eval() call, then it

RE: [PHP] question about security

2003-11-21 Thread Chris W. Parker
Alan Fullmer on Friday, November 21, 2003 5:00 PM said: > do i have to htmlspecialchars every entry? Yes you have to protect yourself from your users data each and every time you receive user data, ever, always. > does this make any sense? I think so. Chris. --

[PHP] question about security

2003-11-21 Thread Alan Fullmer
Is php capable of recognizing things such as in a text box, someone were to put and display say, variables? do i have to htmlspecialchars every entry? does this make any sense? thanks in advance.

Re: [PHP] Question about security: writing images to a directory (chmod 777)

2001-08-10 Thread Data Driven Design
ROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, August 09, 2001 9:07 PM Subject: [PHP] Question about security: writing images to a directory (chmod 777) > For a job I'm working on I need to let PHP-code write images to a > directory. To be able to do that I need to make thi

[PHP] Question about security: writing images to a directory (chmod 777)

2001-08-09 Thread SED
For a job I'm working on I need to let PHP-code write images to a directory. To be able to do that I need to make this directory read- and writeable. Concerned about the security, is this directory open for anyone to write into it? (Let say PHP-code form another server?) If so, how can I solve thi