Web Hosting Forum | Lunarpages
News: October 6, 2008 - Submit Your Site for the October 2008 Site of the Month!
 
*
Welcome, Guest. Please login or register.
Did you miss your activation email?
October 06, 2008, 09:46:52 AM


Login with username, password and session length


Pages: [1]   Go Down
  Print  
Author Topic: How to protect against creating symlinks by limited ftp user?  (Read 139 times)
jureb
Newbie
*
Offline Offline

Posts: 5


« on: May 14, 2008, 01:55:05 AM »

Hy

I'm planning to give some persons some limited ftp accounts on specific folders on my public html folder on a basic hosting plan.

Regarding this I'd have a security question. I want that a ftp users have permission only to reach their own folder (which is given to him) and I want them not to reach other folders, neither the root folder.

But there is a way of creating symlinks with php file that includes:

<?php
symlink("..","up");
?>

Using this code it is possible to create a symlink to upper folder and even to the root folder from a limited ftp account.

Is there a way I can prevent or disable symlink php function on a specific folder and so disallow limited ftp users to reach upper or any other folders simply by making symlinks.


Thanks for your answer.
« Last Edit: May 14, 2008, 02:00:25 AM by jureb » Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.6 | SMF © 2006-2008, Simple Machines LLC

Valid XHTML 1.0! Valid CSS! Dilber MC Theme by HarzeM