<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <html> <head> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <title>Security</title> </head> <body><div class="manualnavbar" style="text-align: center;"> <div class="prev" style="text-align: left; float: left;"><a href="wrappers.expect.html">expect://</a></div> <div class="next" style="text-align: right; float: right;"><a href="security.intro.html">Introduction</a></div> <div class="up"><a href="index.html">PHP Manual</a></div> <div class="home"><a href="index.html">PHP Manual</a></div> </div><hr /><div id="security" class="book"> <h1 class="title">Security</h1> <ul class="chunklist chunklist_book"><li><a href="security.intro.html">Introduction</a></li><li><a href="security.general.html">General considerations</a></li><li><a href="security.cgi-bin.html">Installed as CGI binary</a><ul class="chunklist chunklist_book chunklist_children"><li><a href="security.cgi-bin.attacks.html">Possible attacks</a></li><li><a href="security.cgi-bin.default.html">Case 1: only public files served</a></li><li><a href="security.cgi-bin.force-redirect.html">Case 2: using cgi.force_redirect</a></li><li><a href="security.cgi-bin.doc-root.html">Case 3: setting doc_root or user_dir</a></li><li><a href="security.cgi-bin.shell.html">Case 4: PHP parser outside of web tree</a></li></ul></li><li><a href="security.apache.html">Installed as an Apache module</a></li><li><a href="security.filesystem.html">Filesystem Security</a><ul class="chunklist chunklist_book chunklist_children"><li><a href="security.filesystem.nullbytes.html">Null bytes related issues</a></li></ul></li><li><a href="security.database.html">Database Security</a><ul class="chunklist chunklist_book chunklist_children"><li><a href="security.database.design.html">Designing Databases</a></li><li><a href="security.database.connection.html">Connecting to Database</a></li><li><a href="security.database.storage.html">Encrypted Storage Model</a></li><li><a href="security.database.sql-injection.html">SQL Injection</a></li></ul></li><li><a href="security.errors.html">Error Reporting</a></li><li><a href="security.globals.html">Using Register Globals</a></li><li><a href="security.variables.html">User Submitted Data</a></li><li><a href="security.magicquotes.html">Magic Quotes</a><ul class="chunklist chunklist_book chunklist_children"><li><a href="security.magicquotes.what.html">What are Magic Quotes</a></li><li><a href="security.magicquotes.why.html">Why did we use Magic Quotes</a></li><li><a href="security.magicquotes.whynot.html">Why not to use Magic Quotes</a></li><li><a href="security.magicquotes.disabling.html">Disabling Magic Quotes</a></li></ul></li><li><a href="security.hiding.html">Hiding PHP</a></li><li><a href="security.current.html">Keeping Current</a></li></ul></div><hr /><div class="manualnavbar" style="text-align: center;"> <div class="prev" style="text-align: left; float: left;"><a href="wrappers.expect.html">expect://</a></div> <div class="next" style="text-align: right; float: right;"><a href="security.intro.html">Introduction</a></div> <div class="up"><a href="index.html">PHP Manual</a></div> <div class="home"><a href="index.html">PHP Manual</a></div> </div></body></html>
