Block FTP User from one file

[Vcize]

I wasn't sure which forum this goes in, but this seems the closest fit.

I have a xenforo forum that I run. I would like to give one of the admins FTP access so they can install plugins, themes, etc.

However, I don't want them to have access to the database info (username, password, etc). This info is stored in /public_html/library/config.php. Is there a way for me to give them ftp access but block them from accessing that particular file without messing up the permissions of xenforo?

 

[John Connor]

Unfortunately, I don't think there is a way to block all files and allow access to one or more selectively. Once you have access to the main site's FTP account you have all.

I guess this amounts to trust more than anything. And you should always have backups! I backup my site to no less than five locations, one being a DVD/RW. So if your config.php file gets messed up just restore it from the backup. No problem.

Permissions would be in the database. Not config.php. That would have the database user, password, etc. When I think of permissions I think of forum permissions...

 

[Fardringle]

It's a bit of a hassle to set up if there are a lot of folders, but if your FTP server software allows it you can give their account access to the individual separate folders (excluding the /public_html/library folder) instead of just to the root folder and its contents. However, this won't work if they need access to other files in that folder...

 

[Vcize]

Unfortunately, I don't think there is a way to block all files and allow access to one or more selectively. Once you have access to the main site's FTP account you have all.

I guess this amounts to trust more than anything. And you should always have backups! I backup my site to no less than five locations, one being a DVD/RW. So if your config.php file gets messed up just restore it from the backup. No problem.

Permissions would be in the database. Not config.php. That would have the database user, password, etc. When I think of permissions I think of forum permissions...

Actually you have it backwards . I need to block just one file, and allow them access to anything else.

The backup is not the issue it is them having access to the information in that file.

 

[Vcize]

It's a bit of a hassle to set up if there are a lot of folders, but if your FTP server software allows it you can give their account access to the individual separate folders (excluding the /public_html/library folder) instead of just to the root folder and its contents. However, this won't work if they need access to other files in that folder...

Thanks, I suppose that is the closest I can get to it. I will give that a try! Will they still be allowed to create new folders themselves that they have access to?

 

[John Connor]

If you are using a VPS then I suppose you can create users and groups for the FTP server. This is how it is in the Filezilla server I have running.