protecting php files

[neonep]

hi all,

I have a public_html directory on my account in a server. There are other users on the server too. public_html being chmod'ed to 777 can be accessed by any other users too. I have some php files in the public_html directory, which are chmod'ed to 777 too to be able to execute them from a webpage. Obviously people won't be able to see my php code from the webpage but other users having access to the server might just cd into my public_html directory and view all my files because they are chmod'ed to 777. Is there anyway to prevent others from actually seeing what my code looks like even though they should be able to execute the php through a web browser? The php code basically reads and writes off a database. I tried changing permissions of the php files to 711 and I couldn't view them from the webpage. Please suggest.

 

[percent]

I'm not familar with all of the linux/unix shells but if your server is set to use bash them you could contact your provide and see if they could implement the below

in each users directory there would be a profile file(/home/username/.bash_profile)
add this line to the (/etc/skel/.bash_profile) file
this ensures that any new users that are created on the system will have this added to there profile file
\/ line to add to users profile file
chroot $HOME

but then the annoying part they would have to add this to each users profile file - I'm sure they could come up with a script that would do it pretty quick - but it is their servers so they may not what to take the time to do this
if not you may just want to find one that will

(by the way this post belongs in the linux/unix server section - not the php section)

%, 2004

http://www.darkcipher.net

 

[percent]

also you need your php files to be chmod 755 not 777
this means that any one can read & execute the files and only the owner can modify the files

if you have them set to 777 then that means that anyone on the system can modify them

%, 2004

http://www.darkcipher.net

 

[percent]

I found one solution that is less complicated

instead of using my first post you if you could have the server admin change from "/bin/bash" to "/bin/bash -r"

it will make it so that bash would be in restricted mode so that users could leave their home directorys

src

https://www.redhat.com/archives/redhat-install-list/2003-September/msg00758.html

%, 2004

http://www.darkcipher.net

 

[neonep]

I don't think the sysadmins will be willing to do that. And I understand that 755 will make it so that one can read and execute but I basically don't want anyone other than me to read or write to it, but all should be able to execute it. Is there anything I can do as a temporary solution?

Also, like you suggested I will start a new thread in the linux/unix server section. Thanks.

 

[ericbrunson]

Don't crosspost.

 

[Meekos]

What about .htaccess and redirecting? I don't know much about them but I've heard people say they use it to protect there stuff. Try doing a search on this or the Apache forum for more info.

 

[percent]

.htaccess is for restricting access by http access not shell access

%, 2004

http://www.darkcipher.net