Posted by Jerry Stuckle on 09/26/06 01:41

veg_all@yahoo.com wrote:
> Jerry Stuckle wrote:
>
>
>>Don't have the file within your web site root directory. Or use Apache
>>configuration/.htaccess to block access to the file though the web. Or
>>change the script that reads it to run as another user.
>>
>>All kinds of possibilities.
>>
>
>
> those probably would work but are a little more maintenance than i had
> in mind. anything simpler we may be overlooking?
>

Not if it's in the docroot and you let everyone have read access to it.

Placing it outside the document root should have zero maintenance. If
it's always the same filename, setting up .htaccess has zero
maintenance. Making the script run as another user has zero maintenance.

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attglobal.net
==================

[Back to original message]