Re: [PHP] Protecting individual files/dirs from access

2007-04-17 Thread Richard Lynch
On Tue, April 17, 2007 9:12 am, tedd wrote: > I start building from inside httpdocs folder where I place an > index.php file and then branch out from there. Now, where is "OUTSIDE > the web-tree"? Not inside httpdocs folder is OUTSIDE. If you put a file there, nobody can surf to it. But PHP can

Re: [PHP] Protecting individual files/dirs from access

2007-04-17 Thread tedd
At 6:24 PM -0500 4/16/07, Richard Lynch wrote: index.php is also accessible, if I can guess the login, which I did on my first try... Well, I did provide the log on and password on a subsequent post. BUT, I didn't try to make it hard to guess, that wasn't the point of the post. I was trying t

Re: [PHP] Protecting individual files/dirs from access

2007-04-16 Thread Richard Lynch
On Sat, April 14, 2007 10:47 am, tedd wrote: > At 4:56 PM -0500 4/13/07, Richard Lynch wrote: >>Put the files outside the webtree, and have a PHP script that >> controls >>access and is your gate-keeper. > > Richard: > > How secure is this: I can't answer that question definitely just looking from

Re: [PHP] Protecting individual files/dirs from access

2007-04-14 Thread tedd
At 4:56 PM -0500 4/13/07, Richard Lynch wrote: Put the files outside the webtree, and have a PHP script that controls access and is your gate-keeper. Richard: How secure is this: http://sperling.com/a/pw There are seven files there, namely: http://sperling.com/a/pw/.htaccess http://sperling

Re: [PHP] Protecting individual files/dirs from access

2007-04-13 Thread Richard Lynch
On Fri, April 13, 2007 11:43 am, Skip Evans wrote: > So the directory for the artist, which will be one > level below the docroot, like Don't do that. You have to work WAY too hard to make sure you have a gate-keeper to force people to pay. Put the files outside the webtree, and have a PHP scrip

[PHP] Protecting individual files/dirs from access

2007-04-13 Thread Skip Evans
Hey all, I hope this isn't too off-topic for this list, but I have a need to protect dynamically created directories in an Apache environment and not sure the best way to go about it. It's yer basic LAMP environment, and what will happen is that the client will be uploading a musician's so