Re: Include(filename.php) and security

Animesh K wrote:
Jerry Stuckle wrote:


Many shared servers give you access one level above your web root directory. If you're doesn't, find one which does. If you need the file protected, anything else isn't worth the hassle.


I use godaddy's service, and don't really plan to change (price!). I will check if I can get to a higher directory (but the ftp program gets me directly to the web-root and I haven't fiddled with the .. command).

I can always use some obfuscated directory for the file (like /asaihsaihsaih/filename ..)

Thanks,
Animesh


Good hosting can be found for less than $5/mo. at dozens of places.

GoDaddy is a registrar, with hosting as a sideline. Also,you should never have your registrar as your hosting company, no matter how cheap it is.

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@xxxxxxxxxxxxx
==================

.

Relevant Pages

  • Re: Internet domain issue
    ... I am the hosting company, they paid me a service which included the ... registrar to "lock" the domain so it can not be transferred. ... Network Solutions sent me plenty of resources, ... will contact the Internet registrar just to make sure. ...
    (misc.legal)
  • Re: Malware Site
    ... ('binary' encoding is not supported, ... you find out who is responsible for the site (registrar, hosting company) - do this using a whois database - and email all of them about the issue, and which software it tries to install. ...
    (Incidents)
  • Re: PHP and File Permissions
    ... If you're going to host any business sites, it is well worth finding a hosting company you can trust. ... Here in the U.S., for instance, HIPAA regulations would pretty much prevent keeping most medical information on a shared server. ...
    (comp.lang.php)
  • Re: SBS 2003 R2 MX and A records
    ... you need to get MX and A records created by the new ISP. ... registrar. ... She stated that the old hosting company ... She does not have access to the new hosting companies client website ...
    (microsoft.public.windows.server.sbs)
  • Re: switching from POP3 to exchange - need some help.
    ... Whoever is the registrar for your Domain not necessarily your ISP or Web Hosting company either one controls the A and MX records for your Domain. ... Since you have a web site at FQDN I would have the A record at mail.FQDN Then st an MX record pointing to mail.FQDN when you are ready to transfer to your Exchange server at a priority of a lower number than the MX record that exists at your hosting company now.. ...
    (microsoft.public.windows.server.sbs)