CGI data file permissions

[s0uljah]

I have user data stored in a text file called data.txt which lives on a Unix web server. The passwords are encrypted, but I don't want the data.txt to be viewable from my web server at all.

I'm not sure what permissions to make the file. When I try to change them my application can't read the file either, so that obviously is a problem.

 

[PaulTEG]

Put it in a directory accessible by the web user, but inaccessible from the net
Somewhere like a directory off cgi-bin perhaps
--Paul

cigless ...

 

[s0uljah]

I used .htaccess and that solved it.