CODEWITHSUNDEEP
phpfilepermissions
Bader Alroqi
Bader Alroqi

Reputation: 1

text file permissions to restrict browser access

I've created a log file that is updated whenever someone logs to my webpage. Whether the logging was successful or not. This log has some sensitive information, like unsuccessful password attempts, which most of the time would be close to the correct password. So I don't want someone to go to www.mysite.com/log.txt and find all of this information.

So is there anyway I can modify the permissions of this txt file and make it accessible only from the php page where it writes to it, and of course only through FTP? Meaning is there a way to restrict access to this txt file from the browser while allowing writing to it from a neighboring php file?

P.S. I've already created a random name for the text file to make it difficult to guess from the browser, but I just want a more secure approach.

Thanks in advance for help.

Upvotes: 0

Views: 387

Answers (1)

HamZa
HamZa

Reputation: 14921

If you want to put the file in your web root, create a separate folder and put the file in it, next create a .htaccess file and fill it with the following code:

<Limit GET POST>
order deny,allow
deny from all
allow from 127.0.0.1
</Limit>

Upvotes: 3

Related Questions