Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
I need to upload a file to site with PHP code. How to set permission for upload folder if I want to users cant access to file by URL but PHP code read this file ?
If possible best way to do that is to put your uploaded files outside of your webroot. That way the files won't be accessible by url but your scripts can still access them.
The www (or whatever account is used to run your web server) account needs to have write access to the directory. I would assume that you could block direct access to said directory through an .htaccess file placed in that directory.
It might look something like:
Deny from all
Try chmod 750 on the directory, which will give you full access, the server/program read + execute access, and users no access.
Required, but never shown