[PHP] Further Security Clarifications [was: Simple Security Clarifcation]

2002-08-21 Thread Andre Dubuc
My main files are located in /var/www/html (the 'DOCUMENT_ROOT' in Apache, according to php.ini). All sensitive files have been moved to '/var/www/secure', but now I can't access them! (According to php.ini, the PHP core 'doc_root=none'). I'm totally confused. If I understand this correctly,

Re: [PHP] Further Security Clarifications [was: Simple Security Clarifcation]

2002-08-21 Thread Bob Irwin
/filename.php); Works for me assuming I have the right permissions. Best Regards Bob Irwin Server Admin Web Programmer Planet Netcom - Original Message - From: Andre Dubuc [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, August 22, 2002 11:19 AM Subject: [PHP] Further Security Clarifications

Re: [PHP] Further Security Clarifications [was: Simple Security Clarifcation]

2002-08-21 Thread Andre Dubuc
22, 2002 11:19 AM Subject: [PHP] Further Security Clarifications [was: Simple Security Clarifcation] My main files are located in /var/www/html (the 'DOCUMENT_ROOT' in Apache, according to php.ini). All sensitive files have been moved to '/var/www/secure', but now I can't access them

Re: [PHP] Further Security Clarifications [was: Simple Security Clarifcation]

2002-08-21 Thread Bob Irwin
Thanks Bob, Got a 404: File not Found. Checked the ssl_error_log as suggested, and found a rather interesting entry: No such file: /var/www/html/var/www/secure/test.php Ahhh - ok - I thought you were including them internally from PHP. You are actually linking to the file being SERVED by

Re: [PHP] Further Security Clarifications [was: Simple Security Clarifcation]

2002-08-21 Thread Andre Dubuc
Thanks again Bob, First off, the site is still being debugged off-line, and part of the problem, as you suggested is my confusion over UNIX SERVER and the Apache Server. OK. Got that. What I'm trying to do: Any file that utilizes $_SESSION variables accessed through username/password