Restricting access to folders on web server.

Discussion in 'Security' started by skbytes, Feb 3, 2010.

  1. #1
    Hi Guys,

    In the past I've out sourced PHP programming work from people on the DP forum and on other websites. This involves alot of trust on my part, to actually let someone access your web server and all your important files, so they can do some programming work on a number of files.

    My question is how can I restrict access to directories or files they dont need access too? Do I create another user? What about them downloading my whole website to there computer, how do I stop this? Or is it a case of just trusting these people, hoping they dont just delete the whole of your website...

    Hope you can help.
     
    skbytes, Feb 3, 2010 IP
  2. hans

    hans Well-Known Member

    Messages:
    2,923
    Likes Received:
    126
    Best Answers:
    1
    Trophy Points:
    173
    #2
    look into news ( CNN etc ) and you easily see that there is NO way to trust ppl unless they have PROVED beyond any doubt trustworthiness to YOU.

    hence I NEVER and for no money in the world would allow anyone else but me to access my site/servers !!

    if ever some work needs to be done
    1. YOU need to learn more on your own !!
    2. then with above done - YOU can give for download the precise part that needs coding or modification

    3. modifications of existing code = REQUIRE a diff file that documents every single bit and byte changed/added

    for new code - require the code to be OpenSource and published on the creators web site to allow OTHERS to use/test the same code as well

    4.
    there are of course means to restrict access
    however it appears that YOU lack knowledge to do serious work on your own, that leaves the possibility that you as well lack knowledge to properly secure/control access to your server as well.
    hence if someone wants to screw you and hack your site - he will be able to do so successfully

    5.
    as a last resort you may offer a complete packed download version of all relevant site/server sections needed for your outsourced coding to allow any coder to do all devel and testing on his own local server

    any honestly paid high quality coder should have all professional testing environment at home.
    offline testing or online testing on a coder-owned www-server is simply a matter of time and thus of money paid by you.
     
    hans, Feb 3, 2010 IP
  3. hostechsupport

    hostechsupport Well-Known Member

    Messages:
    413
    Likes Received:
    23
    Best Answers:
    7
    Trophy Points:
    138
    #3
    Hello,

    You can set permissions on folders and files to restrict access.
     
    hostechsupport, Feb 4, 2010 IP