Hi, I've installed and upped a webserver using this howto. It is great working. But now one of my client send me a php script from http://navphp.sourceforge.net/. This is a php script shows everything and everyfile in the server. Is there any security problem with the setup? Or should I make something different ? I've tried to use google but nothing helpful. I found suphp but it is not working well.
To prevent this, you should enable PHP Safe Mode for all your web sites. I'll post a tutorial about suPHP in the next days.