http access and php read/write permissions.... one question !!

[careerbridge]

Hi,

I need to have a file which is not at all available with http, but should be able to read/write using php.

• Where i have to place this file???
• What should be its permission??
• What will be its php access path

The php file will be located at the public_html folder...

Sicerely,
Jim Jose

 

[bigguy]

Can you give us a bit more information please.

 

[careerbridge]

Ok,

I have a php file index.php which is located in the public_html folder. From this file I have to read/write an another file online.txt using the fopen function.

But I don't want my clents to access this file (online.txt) via http://www.mysite.com/online.txt (normally the browser will prompt to download the file when enter this path)

I think its clear now...

 

[bigguy]

Could you use htaccess to stop ppl from getting to "online.txt"

 

[PSP-Heaven]

Or you can jus chmod it so that it is writable by admin, make sure writable by admin is checked, and all the others are not checked. thats should work, if not, chmod it to 000, that should also work.

 

[The_Magistrate]

Or you can jus chmod it so that it is writable by admin, make sure writable by admin is checked, and all the others are not checked. thats should work, if not, chmod it to 000, that should also work.

DO NOT CHMOD 000! If you do that, you will not be able to read the file. Also, PHP is not run with root privileges and will not be able to read the file either. Performing a chmod 000 will only create more problems.

Geoff is right. You should use your .htaccess file to restrict people from accessing online.txt from a web browser. If you properly restrict the file with .htaccess, you can safely chmod 755 the file.

@PSP-Heaven if you know anyone who has a server with PHP running with root privileges please tell them to correct that problem and to talk to someone who knows what they are doing. It boggles my mind as to how much of a vulnerability that is.

 

[careerbridge]

Yeah, that right... I already tried the chmod method and it will not work....

I need to warn PSP-Heaven, bcose once u set chmod 0, u will lose the file permanently. Only one command will work.... delete

Btw, I found good article abt using .htaccess and I think it may be usefull to someone else here...
http://www.javascriptkit.com/howto/htaccess.shtml

Thank u guys for the reply.

 

[Mike-lane]

umm htaccess it. I think with linux _ infront of a folder name makes it locked :lockd: so put it in a folder with _ at the beginning?

 

[careerbridge]

WOW... thats good!! I am gona try this !!