Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: Jim Hale on September 23, 2002, 04:16:57 PM

Title: Activating PHP For A USER Website
Post by: Jim Hale on September 23, 2002, 04:16:57 PM

Is this possible?

I want to setup a Test PHP-Nuke site (since the new version was released today) and when I cruise to http://hale.dyndns.org/~nuke6 , all it does is show the PHP code instead of running it.

Works fine under an IBay though.

Title: Re: Activating PHP For A USER Website
Post by: Jon Blakely on September 23, 2002, 04:21:23 PM

User webspace only allows html, no php or cgi

Jon

Title: Re: Activating PHP For A USER Website
Post by: Jim Hale on September 23, 2002, 11:53:14 PM

Thanks for the info :)

Anyone know if there's any plans for the future of allowing this? Since I use PHP-Nuke, I thought it would be nice (once I get the speed) to maybe run some 'Nuke-lets' and dyndns.org only allows 5 free addresses. :)

Title: Re: Activating PHP For A USER Website
Post by: Dan Brown on September 24, 2002, 12:21:36 AM

This could potentially be a major security vulnerability, as the PHP scripts can read any file that's visible to the www user.  Through a PHP script, the user could view scripts that they don't have permission for.

Title: Re: Activating PHP For A USER Website
Post by: Jon Blakely on September 24, 2002, 03:30:24 AM

Jim

Why not install Nuke in ibays and create virtual domains.

Jon

Title: Re: Activating PHP For A USER Website
Post by: Jim Hale on September 24, 2002, 04:16:14 AM

I thought of that (and that's currently what I'm doing) but I use dyndns.org and they only allow 5 free addresses.

I guess I COULD use some of the other services but I've just used dyndns.org for a long time now. :)