Hi guys,

Is it possible to use fopen/fwrite functions without making the targetfolder CHMOD 777?

I have read several times across the internet that one should avoid using 777 because of the danger of attacks. So is there a way to avoid it, and still have php create and write to a file?

Thanks.

Kind regards
Chrisper

Yes, if you run php as FastCGI which allows you to run php as a user different from "nobody". Then simply make the user the owner of that directory.

(Not as simple as it sounds, ask your host)

Having phpsuexec enabled will fix the problem

Thanks guys.
I wrote to my webhost, and they said that we run cgi. But they also said that it runs with our own usercredentials, so we should be able to edit the files with chmod 700. But I am not... The least I need is, as I have tested, 002 (write permission for public). And that is for writing to an existing file. First I need to create the file, which I cannot at the moment do without chmodding the whole directory to 777.

Is there some way I can set up the php script so that I am seen as the user/owner?

Okay. Together with my webhost we found the solution:

Turns out that the ftp user we are using for the domain is not set as the Owner/Group of the folders. So after we changed this, the php script is able to create and edit the files.