Re: Security problem?

On Tuesday, June 25, 2002, at 08:26 PM, Analysis & Solutions wrote:

I usually run PHP as CGI. My secure files are kept in a directory that's not under the */docroot. Thus, they can't be gotten to through the web server at all. Plus, the secure files are chmoded 600 (which means they can be read/written only by the owner). Thereby, the only user on the server who can read them is me.

Tradeoff, huh? If I understand it correctly, you can't keep the files outside the docroot if you're using mod_php b/c the web server itself is what fetches the file (therefore it needs to be in the docroot). But mod_php is faster than CGI PHP and can handle more simultaneous requests. Right? Erik ---- Erik Price Web Developer Temp Media Lab, H.H. Brown pricee@hhbrown.com