php - Where to store files on server so they are not accessible through a browser? -


when reading through questions , answers regarding maintaining security when allowing users upload files server, of answers said store file in location not accessible browser, , "above document root".

if had site running in 'var/www/' such as:

var/www/mysite/index.html

does "above document root" mean above mysite folder, still in var/www folder, or mean in seperate location var/www altogether, somewhere else entirely on server host's file system?

also, why making file innaccessible browser makes more secure? thanks.

i not worry moving files outside www folder, because if www folder vulnerable (whether through apache or other means) have number of other problems, , files accessible anyways. moving outside www folder has effect on portability of application, hosting companies not allow access beyond user www folder anyways.

enabling override in apache , placing .htaccess file following contents within folder want restricted recommended:

order deny,allow deny

this way application self-contained , portable.

apache2.4 , php5.5 further hardened against issues involving access , execution of unwanted code on os level, recommend using latest versions of these packages possible.


-

Comments

Post a Comment

Popular posts from this blog

What Are The Best Universities In The World?

Harvard and Yale are often referred to as “the best of the best”. But when it comes to the highest ranked universities, these and other Ivy League schools don't even make it into the top five. So what are the world's best universities? Well, according to an index by the Times Higher Education, Stanford ranks 3rd in the world. Most people associate Stanford with tech-capital Silicon Valley, which is where the school is located. And in fact, it's largely because of Stanford that the region is now the global capital of entrepreneurship and technology. In the 1940's and 50's the university heavily encouraged students and faculty to start their own companies, eventually leading to companies like Google and Snapchat. And still today, the school is known to produce some of the most successful entrepreneurs. A Stanford degree is in extremely high demand, and the school maintains the lowest acceptance rate in the country, admitting less than 5 percent of applicants. Much ...
Read more

Hard vs. Soft Water: What's The Difference?

Hard or Soft? HOW AM I SUPPOSED TO KNOW? THEY BOTH LOOK EXACTLY THE SAME! Hey there, Sapna here for Dnews. From the outside, all water is seemingly the same: clear, mostly flavorless, two hydrogens, one oxygen. But once you get past the basics, water is actually pretty versatile. It can be distilled, filtered, tap, bottled, and if you're real fancy, there's water marketed as kosher, organic or kabbalah. But did you know water can also be hard or soft? No, this isn't to describe how the water actually feels. It actually has to do with its mineral content. Water becomes ‘hard' when it has a higher than normal concentration of minerals, primarily calcium and magnesium. Water picks up these minerals from rocks and soil as it flows through rivers, wells or other waterways. Soft water, on the other hand, has a low mineral content, either because it has not yet flowed through rocks or wells - like rain water - or because the rocks it has come in contact with have little to no...
Read more

java - Solr query version issue: Invalid version or the data in not in 'javabin' format -

as part of recent project, our solr search engine upgraded 5.0.0. program runs client works fine in production/qa, when run on local system, error message: caused by: java.lang.runtimeexception: invalid version or data in not in 'javabin' format @ org.apache.solr.common.util.javabincodec.unmarshal(javabincodec.java:99) this exception apache-solr-solrj-1.4.1.jar, would've thought needs replaced. when check (running) production code, same jar file there. however, java version on production server has been upgraded java version "1.7.0_79". on local system, i'm pointing @ 1.6 jre sts/eclipse. if change 1.7, start getting 51 vs. 50 class version error in different part of program, indicating there's issue converting 1.7, although again doesn't seem problem on production server. i have tested solr server running correctly via web client. returns data in json format. one question have is, mean when says "invalid version or data isn'...
Read more