I need to upload a file to site with PHP code. How to set permission for upload folder if I want to users cant access to file by URL but PHP code read this file ?
If possible best way to do that is to put your uploaded files outside of your webroot. That way the files won't be accessible by url but your scripts can still access them.
www (or whatever account is used to run your web server) account needs to have write access to the directory. I would assume that you could block direct access to said directory through an
.htaccess file placed in that directory.
It might look something like:
Order deny,allow Deny from all
chmod 750 on the directory, which will give you full access, the server/program read + execute access, and users no access.