Web Hosting Forum | Lunarpages


*
Welcome, Guest. Please login or register.
Did you miss your activation email?



Login with username, password and session length
May 25, 2012, 11:21:30 AM

Pages: [1]   Go Down
  Print  
Author Topic: How to protect against creating symlinks by limited ftp user?  (Read 833 times)
jureb
Space Explorer
***
Offline Offline

Posts: 6


« on: May 14, 2008, 01:55:05 AM »

Hy

I'm planning to give some persons some limited ftp accounts on specific folders on my public html folder on a basic hosting plan.

Regarding this I'd have a security question. I want that a ftp users have permission only to reach their own folder (which is given to him) and I want them not to reach other folders, neither the root folder.

But there is a way of creating symlinks with php file that includes:

<?php
symlink("..","up");
?>

Using this code it is possible to create a symlink to upper folder and even to the root folder from a limited ftp account.

Is there a way I can prevent or disable symlink php function on a specific folder and so disallow limited ftp users to reach upper or any other folders simply by making symlinks.


Thanks for your answer.
« Last Edit: May 14, 2008, 02:00:25 AM by jureb » Logged
Pages: [1]   Go Up
  Print  
 
Jump to: