Permission?

[Anon]

Hello,

Can someone please tell me the correct permission I should set for my .php files and .inc?

Thank you.

[genecide]

use chmod 755 *.php

[lawnmowerman]

Actually, as long as the file is readable by the web server, you'll be ok.

Mode 755 will work, but 644 would probably be more appropriate since the files aren't actually executed. They are read by the web server and then the code within is executed.

Unless, of course, you compiled PHP as a stand-alone CGI script and you're attempting to run PHP scripts from the command line, then 755 would be correct.

-Rich

[Anon]

Hello,

Thank you for your support! However I tried both 755 and 644 for my .inc files, which are included in my .php files in this "include_once(something.inc)" manner ... I want to prevent users from reading both the .inc & .php code, but the .php need to be able to include the .inc

I tried chmod 755 .inc ... and I can still read the code from the browser! and if I tried chmod 644 .inc ... then when I include .inc in .php files, I got this error

Warning: Failed opening 'lib/something.inc' for inclusion (include_path='') in something.php on line 8

Can anyone please help on how I can achieve what I am trying to achieve?

Thank you!!!

[lawnmowerman]

Well, change the permissions to whatever makes them work 🙂

Then, use the Apache "Files" Directive to limit the access to the include files.

Let's say that all of the include files have the .inc extension. You can put these lines:

<Files ~ ".inc$">
Order allow, deny
Deny from all
</Files>

into either httpd.conf (global or virtualhost sections) or a .htaccess file in the same directory as the include files.

http://httpd.apache.org/docs/mod/core.html#files

-Rich