Im making sort of a service where people can upload PHP files and they get their own directory.
Is there a way to prevent any way the PHP can access开发者_如何学C the root of the server? and just stay in the bounderies of its folder?
The open_basedir
directive does just that :
Limit the files that can be opened by PHP to the specified directory-tree, including the file itself.
The most secure would be to chroot Apache and PHP.
精彩评论