user having access to another user's files

Started by victorsousa, February 01, 2020, 02:55:31 PM

Previous topic - Next topic

victorsousa

I've been observing that just doing something like:

<?php
echo shell_exec("cat /home/user/public_html/teste.php")
?>

to have full access to files from other users.

josemnunez

Please check your account permissions in / home /