Tec. Problem(user using php,ssh can read other user directory)

[alanmok]

i got a problem which user using php or ssh can read other user directory

for example usera using ssh login then type in cd /home/userb/domains/aa.com/public_html

then it can access and read all information,did there have any way to fix it? thanks.

 

[jmstacey]

PHP: Enable safe_mode and open_basedir There was a recent thread on a similar security issue through PHP on these forums (the actual issue wasn't new though). I think it's still in the Feedback forums...

As for ssh most of us (at least I) don't give users ssh access because of this (and some other) reasons. There is a jail system (help.directadmin.com), but it is still beta.