Security issue

[mikawhat]

I had to set chmod of my root directory to 777 in order to be able using fwrite. Could that be a threat to my site?

[thepeccavi]

Indeed it could...

One solutuin would be to put all the files that you are going to fwrite() into one folder and CHMOD that to 777 while leaving the root as 755...

You could just use a MySQL database instead though!

Hope this helps!

[dalecosp]

Or, at some hosts, the web server's DOCROOT is actually a folder that is a level or two under your user account's CHROOT. If this is the case, then you could have:

$ ls -l
drwxr-xr-x  2 user  user  512 Jun 23 17:39 cgi-bin/
drwxr-xr-x  2 user  user  512 Jun 23 17:39 htmldocs/
drwxrwxrwx  2 user  user  512 Jun 23 17:39 somewriteabledir/

[mikawhat]

ok. thanx guys.