Re: problem with a hacker
| From: | Hugh Bothwell | Date: | Fri, 17 Aug 2001 01:22:31 +0000 |
| Subject: | Re: problem with a hacker | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-63114@lists.php.net to get a copy of this message | ||
"Craig Henderson" <php@everythingisfutile.com> wrote in message
news:AKEALILCEDONMAKEGPNJCEBDCDAA.php@everythingisfutile.com...
> My question is, is there anything that I can do so that only PHP scripts
on
> the server are able to access the file? Or am I going to have to contact
my
> hosting company and see if they can figure out how to set the permissions
> properly?
Keep the file outside the web directory... ie, if your
web directory is /home/users/craig/www/ then keep
the file in /home/users/craig
... although telling them to get their sh*t together
is a good plan too...