[nycphp-talk] Basic security question
Daniel Convissor
danielc at analysisandsolutions.com
Sat Jul 17 09:18:53 EDT 2004
On Fri, Jul 16, 2004 at 11:47:30PM -0700, Chris Shiflett wrote:
>
> but if you're concerned about giving away too
> much information, I think error messages are the first place to be
> looking.
Good advice too. The errors display the full path to a file. This can
help crackers learn about you system's configuration and use that info
when leveraging exploits.
--Dan
--
T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y
data intensive web and database programming
http://www.AnalysisAndSolutions.com/
4015 7th Ave #4, Brooklyn NY 11232 v: 718-854-0335 f: 718-854-0409
More information about the talk
mailing list