Member Avatar for mutago

I want prevent symlink attack so i first disable symlink using disable_functions

I need to know other ways of protecting symlink attack using .htaccess files

thank You

  • 3 Contributors
  • 2 Replies
  • 309 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by hag++
Member Avatar for LastMitch

I need to know other ways of protecting symlink attack using .htaccess files

@mutago

How are you preventing an symlink attacked?

Can you post the htaccess code?

To answer your question there's no solid code that prevent any website been hack.

Member Avatar for hag++

The htaccess file is used to limit/grant access to files in the current working directory and below only.

You are already taking a step in the right direction by disabling risky functions such as symlink. To further protect against unauthorized file access in PHP you also want to make sure you never pass unsanitized user input to any file access functions such as include/require. Remember, if user input does not make it into those functions it cannot do any harm. The risk comes when you need to dynamically include files based on user input.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.