Permissions

JMJimmy

If I'm using fopen("file","w+") and it's giving me a permissions error what do I need to do to give permission to create/open the file?

Thanks,

JMJimmy

gid

I'm assuming your running a unix machine with apache since you didn't say, and I have to make this assumption so I don't go nuts.

If you have root access on that machine, then you can "chown webuser.webgroup filename" Where webuser and webgroup is what apache is run as, sometimes called nobody, sometimes it's called 'http', sometimes something else.

If you don't have root on the server, then you can "chmod 666 filename" but this is insecure, as now all users on the machine will be able to access this file, actually the other method is insecure also as any users that can write php code can access it, but what are you gonna do?

JMJimmy

Oh sorry,

Apache, Linux - RedHat 7.3

What I'm attempting to do is make a hybrid management system where the positioning/layout is handled via MySQL/php but the actual code is stored as .inc.php files. For this I'd need to create new files on the server, edit existing files, and such. I assume fopen() is the only way to do that (correct me if I'm wrong).

I personally don't have root access but the web host is very flexible in the configurations for us.

Is what I'm hoping to accomplish even possible without opening up massive security holes?

Thanks,

JMJimmy

the_Igel

You have to trust your webhost anyway. Just do not set unnecessary permissions. In case you need to have a file world-writable, do it.

JMJimmy

A single file wouldn't do it though, since there are multiple pages and each sub-section in the page would need it's own file.

Is there a way to make a directory world writeable (and how?)

Thanks,

JMJimmy

the_Igel

0777

JMJimmy

Ahh I see... works perfectly.

Thanks!

At least now I can close the gap once I'm done executing the script.

JMJimmy