A little question about readdir problem

[alierainy1230]

Well, Everything is working fine.. but when I allow someone to upload files in any map in htdocs and they should use a $readdir script they can list all my pc files.. How can I prevent them from reading outside my htdocs dir??

[Nobbie]

The by far best protection: dont allow others to upload PHP files to your htdocs folder. Would you allow others to install any Executable into your Windows drive? Thats basically the same.

Anyway, there is an open_basedir option in php.ini, which restricts PHP to a certain directory tree (you should read the documentation). But this of course affects your own PHP scripts as well.

[alierainy1230]

http://google.com