RE: PHP security (or the lack thereof)
...
> "The configuration flexibility of PHP is equally rivalled by the code
> flexibility. PHP can be used to build complete server applications,
> with all the power of a shell user, or it can be used for simple
> server-side includes with little risk in a tightly controlled
> environment. How you build that environment, and how secure it is, is
> largely up to the PHP developer."
And is the default install wide open or tightly controlled? I mean from a
security standpoint we have been screaming for years at Microsoft to change
their defaults to firewall on and things locked instead of open.
Is php secure by default when it's installed on a server?
Geo.