Re: File Upload Security and chmod

I may have hit "send" too soon... Like, when you do FTP, do you see: index.htm page2.htm page3.htm right away? *OR*, do you see: public_html And then you do "cd public_html" and THEN you see the files? If you don't do "cd public_html" then I really don't think accepting file uploads is a Good Idea, unless you have access to /tmp or something to put the files in... If you do "cd public_html" then you actually HAVE space outside your webtree. Just do "mkdir uploads" and "chmod 777 uploads" *BEFORE* you do "cd public_html" and you'll have an uploads dir outside the webtree where you can put stuff. NOTE: Some fancy FTP tools like DreamWeaver and whatnot will convince you to put "public_html" into some input box somewhere, to give you the convenience of not needing to "cd public_html" -- which then means you never *SEE* that you have space outside your webtree... Stop doing that. An extra click or whatever to get into public_html is not that big of a deal. On Fri, September 22, 2006 7:21 pm, Andy Hultgren wrote: > So pretty much there's nothing to be done about it? If I can get the > chmod thing to make it so that you can't surf to your uploaded image > afterwards and view it, I'd be happy with that solution. I'd like to > stick with this host if I could. > > On 9/22/06, Richard Lynch <ceo@l-i-e.com> wrote: >> On Fri, September 22, 2006 3:58 pm, Andy Hultgren wrote: >> > that as my root directory is simply www.myDomain.com and not >> > ".public_html/" and I am on a shared server where my root cannot >> be >> >> I got two words for you: >> >> Change Hosts >> >> -- >> Like Music? >> http://l-i-e.com/artists.htm >> >> >> > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > > -- Like Music? http://l-i-e.com/artists.htm