I am currently facing some serious problems with a script and really need some advise before I am actually sick
Did you know?Explore Trending and Topic pages for more stories like this.
To give you a brief overview of the situation, I have a script which is going to end up on someones local PC (dont ask how or why, its an extremely long story). The script will basically end up having all the connection details for someone to connect to my server via FTP. The script allows someone to connect to a folder and download a file from within that. What i have noticed is the script can obviously be edited by anyone (as the file is on their PC, so they can change the script to include commands like ftp_chdir, or ftp_cdup, so I have set the permissions on the server to only allow a person access to a single directory.
What I dont know is (as there are some pretty smart php coders out there) if there is a way someone can bypass this limit and still manage to download other files from my server.
I am basically looking for some advise here on how I can secure this, even though I am fully aware that the process is not a very smart or secure one to start with.
