This topic is locked

security with uploaded files

1/4/2009 4:32:49 PM
PHPRunner General questions
J
jbujosa author

Hello.
If someone knows the url of uploaded file in the apache server, is it possible to avoid the possibility of downloading the file in the case he hasn't logon previously in the phprunner application, (using the apache permissions perhaps)?

J
Jane 1/5/2009

Hi,
just place folder with your files outside www directory.

J
jbujosa author 1/5/2009

Hi,

just place folder with your files outside www directory.


Jane;
In a Linux server, who has to be the owner of the folder with the uploaded files, in the most restrictive way? Apache?