.htaccess

He has: 52 posts

Joined: Apr 2006

Security is a huge issue. No doubt about it. And a part of maintaining security on a server migh include using a '.htaccess' file, right? But what is a '.htaccess' file, exactly?

In trying to conform to the Web standards and finding the most efficient and secure way as possible, I have a question: can a user change a file on a server remotely with the HTTP protocol?

Like, say for example, I had a Notepad-type program. I save the work to local file on my drive, but can I save it to a server? Or does it not use the same protocol?

Computers are hard.

dk01's picture

He has: 516 posts

Joined: Mar 2002

The HTTP protocol only communicates with the web server. .htaccess files are parsed by the web server BEFORE the server sends any information back to the browser. They are parsed on a per-folder basis. To read more about .htaccess just do a google search and you'll find tons of resources.

Busy's picture

He has: 6,151 posts

Joined: May 2001

a .htaccess is just a text file, used more for blocking and rewriting urls', stop hot linking, custom error pages ...

If the file is writable (777) then it can be 'adjusted online', if it blocked (555) it can't be - the numbers are ccmod
handy chmod caculator here - http://javascriptkit.com/script/script2/chmodcal.shtml

He has: 52 posts

Joined: Apr 2006

So, with a file CHMOD'ed 777, can a user use their browser to manipulate/edit/delete a file without the aid of a file-access script?

mairving's picture

They have: 2,256 posts

Joined: Feb 2001

Maxwell wrote: So, with a file CHMOD'ed 777, can a user use their browser to manipulate/edit/delete a file without the aid of a file-access script?

Yep.

Mark Irving
I have a mind like a steel trap; it is rusty and illegal in 47 states

Want to join the discussion? Create an account or log in if you already have one. Joining is fast, free and painless! We’ll even whisk you back here when you’ve finished.