Hello,
I want to set users permission to read-only to prevent deleting files and folder via unsecure php shells like c99.
When I upload php shell to my server the script gain all permissions as a user read/write/execute/delete.
I have Suexec and Suphp modules installed on my server, I know that no user can view other user files and folder or executing any commands in any folder owned by the root group, also I disabled many php functions via php.ini and installed mod_security with good rules but it block shells when its called under certain names like c99 and I'm still able to execute nay command via these shells.
Thanks in advance.
