disable php/cgi program execution

[Anon]

Hi Chaps,

One of the facilities I prove for my users is the ability to upload files to the webserver using web forms.

I have installed php as a module in apache, but I would like to disable any executables files from being executed in this directory and any directories under it.

I have tried the following directory directive but it does work.

<Directory /usr/local/nusphere/apache/sites/******/htdocs/files>
Options IncludesNoExec
</Directory>

Any help would be greatly appreciated.

Ray

[Anon]

php has an isexecuatable() function. you could check the files before you copy them