Results 1 to 4 of 4

Thread: Outside WebRoot

  1. #1

    Outside WebRoot

    I'm pretty sure I know the answer but if a file is outside the Web Root is there absolutely no way that it can be accessed normally via a browser?

  2. #2
    Hi

    Generally thats correct, except if you have a PHP script and wide open settings in your PHP setup to allow a rogue script to look at files outside your webroot (openbasdir)

    Thanks

  3. #3
    Join Date
    Sep 2002
    Location
    Top Secret
    Posts
    14,146
    The answer to this is more complicated than yes and no.
    YES, using an ordinary html setup, you can not access files outside WebRoot.
    HOWEVER, it is possible to access files outside of webroot, as suggested earlier, say, by using openbasedir, or even better, through recommended practice (php attachment storage, etc). An example:

    vBulletin allows the user to store attachments in the filesystem, even outside of the public_html directory. These files are still downloadable, or viewable, you just have to use vBulletin (or the script designed to store/download them) to do so.

    For most users, yes, storing something outside of webroot is the best answer.
    Tom Whiting, WHMCS Guru extraordinaire
    Linux problems? WHMCS Problems? Give me a shout
    Check out my WHMCS Addons

  4. #4
    Thanks "linux-tech" for your reply. It is new info for me. I also not had any idea about it.

Similar Threads

  1. shorten webroot with ./ right?
    By acctman in forum Programming Discussion
    Replies: 4
    Last Post: 08-23-2010, 10:11 AM
  2. How do I set up the CGI-BIN as webroot
    By Hero Doug in forum Hosting Security and Technology
    Replies: 2
    Last Post: 09-21-2008, 09:53 PM
  3. Webroot Spy Sweeper 2 Years $14.95
    By Rich in forum Computers and Peripherals
    Replies: 7
    Last Post: 07-08-2006, 07:52 AM
  4. getallheaders() .vs. phpsuexec + webroot protection + php open base_dir
    By minasonline in forum Programming Discussion
    Replies: 4
    Last Post: 10-18-2003, 06:42 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •