--- Brad Esclavon <[EMAIL PROTECTED]> wrote:
> the secured page is viewable from the internet if i
> explicitly enter the url. I have set the secured
> page's permissions to 700 and the input page to 755.
> even though my permissions disallow outside access,
> why can you get to the secured page?

Your permissions disallow outside access? That sounds like
an erroneous assumption to me. A mode of 700 means only the
owner can read (and write and execute) the file. Do you
know who owns the file and what user Apache runs as?

Rather than relying on your own guesses with regard to the
behavior of file permissions, I would suggest placing the
file in question outside of document root.

Chris

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to