>Can't the files be put into a directory that Apache has access to and
>the users don't, and just ask the users to include them? Or put them
>into a global prepend in a directory same as above?
This isn't PERFECT, but I do this:
#1 - make a user/group called "www"
#2 - Set Apache to run as that user.
#3 - chmod all web-directories to 700 permission (chown www:www -R *;
chmod 700 -R *) - so that ONLY "www" can read/write them.
#4 - log in as "www" user when you're uploading files to your webserver.
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]
