Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:12314
Return-Path: <sthomas@townnews.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 8884 invoked by uid 1010); 23 Aug 2004 19:45:59 -0000
Delivered-To: ezmlm-scan-internals@lists.php.net
Delivered-To: ezmlm-internals@lists.php.net
Received: (qmail 1561 invoked from network); 23 Aug 2004 19:45:17 -0000
Received: from unknown (HELO dns1.systems.townnews.com) (208.229.121.1)
  by pb1.pair.com with SMTP; 23 Aug 2004 19:45:17 -0000
Received: from [10.81.10.35] (leepcI-189.sub-i.lee.net [12.163.60.189])
	(authenticated bits=0)
	by dns1.systems.townnews.com (8.12.11/8.12.11) with ESMTP id i7NJjLEp030981
	(version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NO);
	Mon, 23 Aug 2004 14:45:21 -0500
Message-ID: <412A4943.8030304@townnews.com>
Date: Mon, 23 Aug 2004 14:45:07 -0500
User-Agent: Mozilla Thunderbird 0.7.1 (Windows/20040626)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: ilia@prohost.org
CC: internals@lists.php.net, Adam Q <aqsalter@westnet.com.au>
References: <0ADA645E-F4F3-11D8-AC67-0003939D6C78@westnet.com.au> <smaexa4e.fsf@random.internal> <B7C319CE-F50B-11D8-8B89-0003939D6C78@westnet.com.au> <200408231016.54155.ilia@prohost.org>
In-Reply-To: <200408231016.54155.ilia@prohost.org>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [PHP-DEV] SQLite security
From: sthomas@townnews.com (Shaun Thomas)

Ilia Alshanetsky wrote:

> An Sqlite database is nothing more then a binary file, and you should treat it 
> such. If you do not want to have people being able to download it, do not put 
> it inside a web accessible directory.

Or, don't forget the existance of .htaccess files.  Want to block sqlite 
files by default with an application you distribute, and you don't know 
where the user will drop the files?  Put one of these in the root of 
your application in a .htaccess file:

<files *.sqlite>
order deny,allow
deny from all
</files>

Either way, I don't see how this is a PHP or sqlite issue of any kind. 
Server security through file restriction is a problem with many 
solutions that are beyond the scope of this mailing list, IMO.

-- 
Shaun M. Thomas                INN Database Administrator
Phone: (309) 743-0812          Fax  : (309) 743-0830
Email: sthomas@townnews.com    Web  : www.townnews.com