|
|
Posted by Sandman on 09/26/06 08:14
In article <1159235397.971519.254830@h48g2000cwc.googlegroups.com>,
veg_all@yahoo.com wrote:
> Jerry Stuckle wrote:
> >
> > Placing it outside the document root should have zero maintenance. If
> > it's always the same filename, setting up .htaccess has zero
> > maintenance. Making the script run as another user has zero maintenance.
>
> These are all one extra thing you need to do to get the script to run.
> I need to be able to setup the script on a different server often, so
> this would add to the checklist. Hence I am looking for the easiest
> solution that would not require me to make additional changes.
Eh, he is giving you the solutions that apply to your problem. How
that affects your workflow wasn't known and isn't his problem. If the
file is in the docroot, people will be able to read it. Keep sensitive
data out of the docroot. run sensitive scripts as another user, use
..htaccess of you must have it in the docroot.
--
Sandman[.net]
Navigation:
[Reply to this message]
|