File relocation problem

[cschoon]

<_< Hello,

I am sort of new to this but I thought I new what I was doing. I moved the escalConfig.php file out of the public_html directory for security reasons. I then changed the 4 files which had call lines require ("escalConfig.php") to require ("../blah/escalConfig.php"); When I tried to run this nothing works. But when I leave the config.php file in the public_html files everything works absolutely fine.

I also tried creating a seperate file for the passwords and installed a line in the config.php file require ("../blah/mysql_connect.php"); In the mysql_connect.php file I copied the variables that were in the working escalConfig.php file. That didn't work either.

There were no error messages just a blank white screen. I have worked with php before and a white screen usually in my short experience means something is typed wrong or the code is not functioning properly.

Any help would be great???

[Brian]

Please try the Beta Version 4.5 from the downloads page. It will let you move the script to another location.

[cschoon]

:huh: Hello,

Ok I have tried the beta 4.5 version. Same results as before. I can't move the escalConfig.php file out of the public_html directory. I have changed all the require lines to ('../blah/escalConfig.php'); but that doesn't seem to work.

My question now is am I typing the require line wrong or is this just a bug???

Craig

[Brian]

I'm not sure why you would need to move the escalConfig.php file for security reasons? No one should be able to read the file and there isn't any code that would run if it was executed on it's own.

Please let me know if I don't understand why it would need to be moved? I don't want there to be any security risks.

[ve9gra]

just a hunch here... i don't have a linux host... but wouldn't you have to set permissions to 777 on the files that you want outside of the public_html folder... because it's the apache server that's accessing them... not you...

do i make sense? :wacko:

[cschoon]

Hello,

Here is what my brain is thinking. Since the escalConfig.php file is in the public_html directory anyone could possibly access it. Since all the passwords to the database and the authentication process are in there, those passwords are open to the public technically. Unless I don't understand this whole thing. I just want to be able to put the password file above the public directory so not just anyone could possibly access it. I hope this helps explain where my brain thoughts are.

Also, I have others files called like the require I am trying to do here and they are set for chmod 644 and everything works fine for them? So I am sending a ticket to my server company and double checking with them. Thanks.

Craig

[Brian]

If your server is configured to parse PHP files (which it must be), then without FTP or telnet access, no one should be able to read the contents of that file. If they tried, it would only output a blank page.