secure my config.php

[Projekt German]

hey all -

I am looking to understand how I limit access to my config.php file but still let another user utilize the ftp.

thanks for your help

[Dismounted]

What? Do you mean you want to limit FTP access to your config.php file?

[MjrGaelic]

If you have root access to the server then move the config.php file out of you're root file system. if you're in /var/www/html/forum the put the actual config.php file into /var/www .

Then make a new config.php file and put in the code:

<?php require('/var/www/config.php'); ?>

You're FTP users should be jailed to the /var/www/html directory and thusly not able to chdir to www to read the contents of your config.php file.

[Paul M]

If you have open_basdir restrictions on your server you will [probably] need to update them to use that system.

[Eikinskjaldi]

Any of the decent ftp servers (e.g. pro or pure) allow you to set up virtual logins which have as their root an arbitrary directory. It's a few click setup if you have cpanel, and a bit of configuration otherwise.

You can use this to restrict users to a specific location, though it will include all subdirectories of the virtual root.