secure my config.php
 

hey all -

I am looking to understand how I limit access to my config.php file but still let another user utilize the ftp.

thanks for your help

What? Do you mean you want to limit FTP access to your config.php file?

If you have root access to the server then move the config.php file out of you're root file system. if you're in /var/www/html/forum the put the actual config.php file into /var/www .

Then make a new config.php file and put in the code:
You're FTP users should be jailed to the /var/www/html directory and thusly not able to chdir to www to read the contents of your config.php file.

If you have open_basdir restrictions on your server you will [probably] need to update them to use that system.

Any of the decent ftp servers (e.g. pro or pure) allow you to set up virtual logins which have as their root an arbitrary directory. It's a few click setup if you have cpanel, and a bit of configuration otherwise.

You can use this to restrict users to a specific location, though it will include all subdirectories of the virtual root.