Hello,
I am using WebsitePro 2.5.8 on a Win2K server to provide web sites for various projects and non-profit organizations. I have PHP 4.0.6 from php4win.de installed on my development box and it is working fine.
I want to limit the damage that any one develper can do to the virtual host that they are developing for. I need to prevent a PHP page executing on Site_A from include()ing a file from Site_B. I sure as hell don't want a PHP page to do something like download the registry.
I read through the config page in the manual but I didn't notice anything that might help. I don't want to totally disable any of PHPs functions, just restrict their access to a specific tree, the DOCUMENT_ROOT would be OK.
What should I be looking at? Did I miss a config setting? How are other people setting up PHP for web hosting companies?
Thanks, any suggestions are appreciated.
--dennis
