PHP question.

[joychung]

I have a little question in PHP.
I have a friend who want a subdomain in my website.
http://dopeynite.joypalace.net -> http://www.joypalace.net/dopeynite/

if he upload a php script in there. Did the php script can access or list or delete all the file in the main domain (http://www.joypalace.net/ ).

How can I block all script executing in the subdomain and they child only?

example: DopeyNite allow use php script list all file in http://www.joypalace.net/dopeynite/*.*
http://www.joypalace.net/dopeynite/*/*.*

Block him list all file in
http://www.joypalace.net/*.*
http://www.joypalace.net/(another folder)/*.*

Thanks,

[MachineDog]

This isn't technically possible unless they were different users, hence reseller packages. I'd recommend not letting ANYONE ftp upload access but yourself.

[joychung]

If that so, Is there a way to block executing a php script in a specified folder/directory?

[sysops]

Yes... Chmod, set permissions for dir to read only.

[nexia]

the point with PHP scripts is that any good coder can hack any kind of server with these... so i would suggest that you give no access to anybody else than you to your own location... your friend can surely afford to have his own account if he needs to host php scripts...