Results 1 to 4 of 4
Thread: Outside WebRoot
-
04-17-2011, 03:05 PM #1WHT Addict
- Join Date
- Mar 2011
- Posts
- 138
Outside WebRoot
I'm pretty sure I know the answer but if a file is outside the Web Root is there absolutely no way that it can be accessed normally via a browser?
-
04-17-2011, 03:26 PM #2Newbie
- Join Date
- Jan 2010
- Posts
- 29
Hi
Generally thats correct, except if you have a PHP script and wide open settings in your PHP setup to allow a rogue script to look at files outside your webroot (openbasdir)
Thanks
-
04-19-2011, 02:35 AM #3
The answer to this is more complicated than yes and no.
YES, using an ordinary html setup, you can not access files outside WebRoot.
HOWEVER, it is possible to access files outside of webroot, as suggested earlier, say, by using openbasedir, or even better, through recommended practice (php attachment storage, etc). An example:
vBulletin allows the user to store attachments in the filesystem, even outside of the public_html directory. These files are still downloadable, or viewable, you just have to use vBulletin (or the script designed to store/download them) to do so.
For most users, yes, storing something outside of webroot is the best answer.Tom Whiting, WHMCS Guru extraordinaire
Linux problems? WHMCS Problems? Give me a shout
Check out my WHMCS Addons
-
04-19-2011, 07:20 AM #4Disabled
- Join Date
- Jan 2011
- Posts
- 875
Thanks "linux-tech" for your reply. It is new info for me. I also not had any idea about it.
Similar Threads
-
shorten webroot with ./ right?
By acctman in forum Programming DiscussionReplies: 4Last Post: 08-23-2010, 10:11 AM -
How do I set up the CGI-BIN as webroot
By Hero Doug in forum Hosting Security and TechnologyReplies: 2Last Post: 09-21-2008, 09:53 PM -
Webroot Spy Sweeper 2 Years $14.95
By Rich in forum Computers and PeripheralsReplies: 7Last Post: 07-08-2006, 07:52 AM -
getallheaders() .vs. phpsuexec + webroot protection + php open base_dir
By minasonline in forum Programming DiscussionReplies: 4Last Post: 10-18-2003, 06:42 PM