[Webdev] PHP security

[Donncha O Caoimh]

If it's not for viewing by the public then anywhere you like(within
reason.. you won't write to /usr/local/bin) outside of the htdocs
directory tree. Make sure the directory is owned by whoever runs the
webserver.. usually "nobody".

Donncha.


john at beerandloathing.com wrote:
> 
> Hi all,
> 
> Does anyone have any recommendations for places to write to a file from a PHP script. Is there a default 'safe' directory that the Apache user can user which is not accessible from webroot?
>