Collaborate Disseminate
Assume the following scenario:
You have to set up a machine in a way that a user is unable to bring out a certain set of files (or a single file only) from that machine while he has to be able to access the file on the machi… Continue reading How can I prevent someone from carrying out a file from a machine
I hope that I have found the correct place to ask my question regarding unzipping files.
I would like to see if there is a way to restrict the locations available to the user to unzip a password protected zip file in order to ensure secur… Continue reading Restricting locations for unzipping a zip file
What is the difference between include_path and open_basedir in PHP? My php.ini looks like this:
include_path = ".:/usr/share/php:/usr/share/pear:/var/www"
If, for example, I try using include(‘../../etc/passwd’); the file is in… Continue reading Restrict file access in php.ini
Consider some files and folder in Unix/Linux OS which are configured for only read access by root, if the hard drive stolen, and used in Windows Environment, are these permissions are still effective?
Same scenario: setting file and folde… Continue reading Are file permissions set in Unix/Linux effective in Windows or Any other OS?
I’ve been reading in most hardening guides for Linux, that you should check for files and directories without valid user or valid group. What I can’t find, is how this could be used for an attack, or how this could be a weakn… Continue reading Why should the user ID and group ID of every file match an existing user?
I am trying to accomplish the following and have been unsuccessful. I would appreciate any insight. Scenario: http://www.mydomain.com/filename.html is a webpage. On this webpage I am running a viewer script that calls up documents (.png,… Continue reading blocking direct access to files via url input while still allowing a script on server to access files
First: I can’t find any information on this phenomenon, not anywhere on the net.
I don’t know which application does it, but something in my Windows 7 Home Premium system (fully updated & legal) updates my hosts file. I have UAC enab… Continue reading Something is changing my hosts file without asking