disable access for higher level folders

[_Dan]

Is it possible to chmodd or something a folder in such a way that the scripts it contains can only modify/write/read files in it's own directory or sub directories? But not higher level ones.

The idea for this is so that if someone...compromised... the script, they could not do too much damage.

note: this is just a random idea.

[felgall]

If you actually wanted to disable the script being able to access files at a higher level you could try searching the filename for ./ and not allow access if that is found anywhere in the name.