Re: Keeping "Secrets" in PHP Files

>The hosting provider could probably implement a solution... Alter the FTP >configuration to automatically set the group permission to that of the web >server when you transfer files. You wouldn't need to be in the group. >You're the owner and can modify your own files. World Read access would be >unnecessary. > >Thoughts? So I write a PHP application to read your file, or just symlink a .phps file to it. Game over. The "Group" is no more magical than the "User" as an access route. If PHP can read it to use, PHP can read it for me to steal. -- Like Music? http://l-i-e.com/artists.htm