[RESOLVED] Question about file access chmoding

mzanimephp

Hi, I currenltly have a plain text file, which uses a .php extension which contains email addresses.

Of course I don't want these email addresses to be viewable by the general public at all, but I DO however, need another PHP script to be able to read/write to this file. I also need to be able to download this file from time to time via FTP, for editing.

What is the correct chmod to do this??

Basically, web users should get a HTTP error (or something) if they try to browse directly to it. But via FTP I should be able to download it, and my PHP script should be able to edit it.

I know some of you might say "put it outside the web root", but thats not an option in this case.

NogDog

Since you're naming the address file with a .php suffix, a simple solution would be to add the following line at the start of that file:

<?php die("You do not have permission to view this file"); ?>
...rest of file...

Then just adjust your script to not read values from the first line.

mzanimephp

Sounds good, but I think you forgot that this was posted in the Newbies forum - how do you do that? 🙂

NogDog

mzanimephp wrote:
Sounds good, but I think you forgot that this was posted in the Newbies forum - how do you do that? 🙂

LOL - I wasn't even thinking about which forum it was in. 🙂

How are you reading/writing from that file right now? If you can show that code, I could probably suggest a (hopefully simple) modification.

mzanimephp

Like this:

 $openmail = fopen("filenameremoved.php", "r");

And this is how I'm writing to the files:


// Check if an Email address has to be added, and add to the list via "," seperated values
                $list  = file_get_contents("newsletter/filenameremoved.php");
                if (strlen($list) == 0){
                    $newitem = $email;
                } else {
                    $newitem = ', '.$email;
                }

            // Add it to the file
            $openmail = fopen("newsletter/userlist.php", "a+");
            fwrite($openmail, $newitem);
            fclose($openmail);
		    echo '<p>Success!</p>';

NogDog

Looks to me like it should work as it is, even if you add that one line of code to the top of the file.

mzanimephp

Interesting. The file (without any PHP in it) is now throwing a 500 error, whereas before I could see the values as text.

It's chmod to 666.

mzanimephp

Hmm, must've been a server fart. It's working like a charm now. Thanks.