[Resolved] File Security

aksival

If a text file is being used as a data file for a blog/guestbook/etc., is there any way to limit access to the script only?

In other words, if a user types in "http://example.com/textfile.txt" they will recieve a "FORBIDDEN" or "ACCESS DENIED" error, but the script can still access it.

Alternatively, does anyone know any good beginner tutorials for MySQL?

Thanks.

justsomeone

your best option is to keep textfile.txt outside of your webspace.

For example, if your web pages are stored in /var/www/html/ create a dir called /var/www/include/ and store your textfile there.

Your php/whatever files can still include it:
include ("../text/textfile.txt");
include ("/var/www/text/textfile.txt");

but there's no route to it from the web.

If you have to keep it in your webspace, you can stick it in its own directory and use a .htaccess file there with a "deny from all" directive to lock it off from web browsing. This would require your web server to be configured to support this.

devinemke

or store the file anywhere an CHMOD it to 600

aksival

or store the file anywhere an CHMOD it to 600

Perfect...Although I would still like to learn MySQL. This works good for now, though.

Thanks!