I'm writing a log program in PHP that writes to a file (log.txt), just displaying visiting IP addresses and browser info. Since this file is in a public folder, I know it can be accessed at www.myaddress.com/log.txt However, if this file is not linked to the index file or advertised in anyway, can anyone find out that its there? In other words, I'm asking if anyone can get a listing of my public folder and if so how? Thanks

if they no the file location, yes or, they can guess, e.g www.web/log.txt www.web/doc.txt www.web/logger.txt which is pretty far fetched, however u can set up .htaccess to restrict any access to a folder directive, and if you want even set a password up so only those who know password can get in Sign Me Guestbook! jaymc.co.nr

The only way to know a folder exists is to have a document link to it, a sub folder, or document within it or a sub folder. If there are no URI's that include the folder name, then the folder isn't known through any type of indexing or searching. Apache has a directory listing module which is enabled by default, but that can be disabled. Consider changing the permissions of the entire folder and making a script with a very simple login that lets you view it's contents.

or... you could just make the log file OUT of the web directory making it IMPOSSIBLE for regular people to get to the file example: c:\windows\www\logs //log directory example: c:\apache\www //webserver directory FBI_Agent