View Single Post
  #11 (permalink)  
Old 06-15-2007, 12:33 PM
wige's Avatar
wige wige is offline
Moderator
WebProWorld Moderator
 

Join Date: Jun 2006
Location: United States
Posts: 1,764
wige RepRank 4wige RepRank 4wige RepRank 4wige RepRank 4
Default Re: Opening a file outside of the root

Some server configurations may not have or allow you to upload to any folder that is not part of your server tree. If that is the case, you can usually modify the .htaccess file so that it does not serve anything in your connections folder (but the PHP parser ignores .htaccess and will still access the script).

To get even more tricky, if you use a customized error 404 page, you can change the 403 error doc (shown to anyone who tries to access the connections folder) to use your custom 404 page instead. Just add a line to the top of the error page to change the header to 404 and casual observers should not be able to tell.

Also, for troubleshooting, do you have any level of command line access to the server? Unfortunately some PHP installations do not give much (or any) feedback when there are errors, and the only way to find out what the problem is is by running it through a PHP interpreter on the command line.
__________________
The best way to learn anything, is to question everything.
Interestingly Average Security Blog

Last edited by wige : 06-15-2007 at 12:37 PM.
Reply With Quote