[Koenie]

I have a .txt file and I don't want anyone to view it (including myself) but I still want my PHP scripts be able to read it and write to it. Is there a way of securing that .txt file like that?

Thanks, Koenie

[fyrestorm]

yup there is, it's called a .htaccess page, and i'll tell you how to make it, in a moment, gotta pull up the code...

[fyrestorm]

ok create a file named .htaccess

and put the following in it

<files "*.*"> 
deny from all 
</files> 

and then upload it to the dir where the file you don't want anyone to see is. i usually make a config folder and it only ever contains a config file and the .htaccess file

hope this helps you, if not ask more and i'll try to help you out better

[gneato]

That won't prevent people with shell access from viewing it.

[fyrestorm]

then what do you suggest?

[Quik]

gneato, on Dec 18 2002, 05:03 AM, said:

That won't prevent people with shell access from viewing it.

nothign will prevent someone from accesing a file.. IF THEY HAVE SHELL ACCESS!

[gneato]

Quik, on Dec 18 2002, 09:58 AM, said:

gneato, on Dec 18 2002, 05:03 AM, said:

That won't prevent people with shell access from viewing it.

nothign will prevent someone from accesing a file.. IF THEY HAVE SHELL ACCESS!

Unix has this really cool feature called permissions.

Unfortunately, Guardian's current setup runs every single site's php with the same username (most web hosts are like this) so if one site's php script can look at a file, so can the other site's php scripts.


If you're only worried about people viewing the file from the internet, then the .htaccess is a great way.

[Koenie]

Can my PHP scripts still work with it this way?
How does the file need to be called? just '.htacces'?
Can I make that file using something like: notepad?

Koenie

[fyrestorm]

call the file .htaccess

yes your scripts can still work, if of course, they're being included in another script...

and yes, you can use notepad to create that file in

[Cookie Mobster]

But if you make it one a windows machine you will have to name is something other then .htaccess and upload it and change the name, windows doesn't like a filename starting with .

[fyrestorm]

Cookie Mobster, on Dec 19 2002, 10:38 AM, said:

But if you make it one a windows machine you will have to name is something other then .htaccess and upload it and change the name, windows doesn't like a filename starting with .

that's odd, i have no problems making .htaccess files on a windows machine...