Re: Security Question

From: Date: Wed, 17 Oct 2007 13:14:02 +0000
Subject: Re: Security Question
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-263265@lists.php.net to get a copy of this message
Does anyone know a good way to protect a directory that a php script NEEDS to write too? What I'm doing now: 1. create a directory manually "myDir" 2. chmod 777 myDir 3. password protect the directory with htaccess Is this the best way, or is there something better?
You could chmod the file/directory to 700 and change the owner to that of the webserver (presumably the script is being run via the webserver). This has the drawback that anything run from the webserver will have write access to the files. -- Richard Heyes +44 (0)800 0213 172 http://www.websupportsolutions.co.uk Knowledge Base and HelpDesk software that can cut the cost of online support

« previous php.general (#263265) next »