sorenchr Posted January 12, 2009 Share Posted January 12, 2009 Hi, im currently developing a login system for my webpage. Recently i read a tutorial that stated that all php pages, containing sensitive code, should not be placed in the webserver root(Im on a shared webhost). So would a secure solution be, to place my login-process.php(handles the entered form data) inside a folder called "login" for example? Link to comment https://forums.phpfreaks.com/topic/140432-secure-location-for-php-files/ Share on other sites More sharing options...
xtopolis Posted January 12, 2009 Share Posted January 12, 2009 Primarily they mean a non www accessible directory. You can change the CHMOD the directories from most FTP clients. Link to comment https://forums.phpfreaks.com/topic/140432-secure-location-for-php-files/#findComment-734978 Share on other sites More sharing options...
sorenchr Posted January 12, 2009 Author Share Posted January 12, 2009 Primarily they mean a non www accessible directory. You can change the CHMOD the directories from most FTP clients. Is there a guide or tutorial to do this somewhere? I have absolutely no knowledge to CHMOD. Link to comment https://forums.phpfreaks.com/topic/140432-secure-location-for-php-files/#findComment-734981 Share on other sites More sharing options...
sorenchr Posted January 12, 2009 Author Share Posted January 12, 2009 Oh wait, im using Filezilla, and when i right click on a directory and select "File attributes...", i can set some options for that particular directory. Seems like i can change owner, group and public permissions (write, execute and read), and i can assign a numeric value to that directory, is this what you are talking about? Link to comment https://forums.phpfreaks.com/topic/140432-secure-location-for-php-files/#findComment-734984 Share on other sites More sharing options...
xtopolis Posted January 12, 2009 Share Posted January 12, 2009 Yes. Owner will be the server hosting your site usually. If you remove Group and Public permissions, it should come out to 700. Then you can try to access it by going to http://www.yoursite.com/yourfile.ext and you should not be able to access it. There are tutorials, just google it. CHMOD, web file permissions, etc etc Link to comment https://forums.phpfreaks.com/topic/140432-secure-location-for-php-files/#findComment-734986 Share on other sites More sharing options...
sorenchr Posted January 12, 2009 Author Share Posted January 12, 2009 Alright, it makes sense now, thanks for your help. Link to comment https://forums.phpfreaks.com/topic/140432-secure-location-for-php-files/#findComment-734987 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.