Posted by Balazs Wellisch on 12/30/05 07:28

Yeah, it would have to be owned by the apache user since I'm assuming you're
going to upload the files through the web as well. Apache will need to have
write access to it. I don't think any other user should have access to it at
all

To upload the files you'd just use move_uploaded_file().
http://www.php.net/manual/en/features.file-upload.php

B

>
> Interesting. That's a good idea. Would this directory off the
> web-root be owned by the apache user/group? (Doesn't the PHP script
> run as the apache user?) Cause if the files were just world-readable,
> I would have to figure a way to get the files there after uploading in
> the first place, which presumably could just be a perl script or
> something run as the owner of the directory.
>
> Thanks for the idea,
> jab3
>

[Back to original message]