Skip to:
Content
Pages
Categories
Search
Top
Bottom

Do I have to protect the forum directory

Viewing 4 replies - 1 through 4 (of 4 total)

  • chrishajer
    Participant

    @chrishajer

    You don’t need to protect anything. All php files should be 0644 permissions, the directories should be 0755. Any file with a php file extension will be processed by PHP on the web server, so for something like the bb-config.php that does not return any content, the browser will not display any contents. A lot of php files with private information in them are like that, with no content returned.

    Load this page:

    http://www.autogas-umruestungen.de/forum/bb-config.php

    There’s nothing displayed in the browser since the web server returns the processed output of the php file, not the source of the file.


    Basti1900
    Member

    @basti1900

    Hi chrishajer,

    thanks for your fast reply.

    Last question: What if someone downloads the files with a different program. Could this person find my database access data including the password in the php which contains this information?

    Best

    Sebastian


    chrishajer
    Participant

    @chrishajer

    No – it has nothing to do with the program they use, it’s how that file is served by the web server. If the web server is configured correctly (to process PHP files and not display them) then there’s nothing to worry about. If your forum is usable, your web server is configured correctly.


    Basti1900
    Member

    @basti1900

    Thank you very much.

    Cheers

    Sebastian

Viewing 4 replies - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.