You can write the fpdf file into ANY folder that PHP has write access to, and there is no reason to put that folder directly into your web tree. You could certainly use /tmp with http://php.net/tmpname and friends, or you could just set up some folder in a convenient location as world writable. If you then store the FPDF filename in a database, you can have a cron job that checks every file in the directory, and each "active" record in the database, and then move only the files that you have cross-checked to be expected. This makes it fairly secure, as somebody would have to hack both the file system access and the db access to get the FPDF to go live. On Fri, July 28, 2006 8:14 am, João Cândido de Souza Neto wrote: > Hi everyone. > > Here i am again talking about fpdf. > > In the last question Peter told me that i can set a folder to write a > pdf > file by fpdf class but, to do that i ought to set permission to web > user to > write in this folder and think it´s bad to security. > > I thought a lot about it and then came back here to try to explain a > little > doubt. > > Could i write the pdf file into a temporary folder of php and then put > it > into the right folder by ftp? > > If yes, anyone could help me about that, something like; which folder > can i > write the file? > > Thanks a lot. > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > > -- Like Music? http://l-i-e.com/artists.htm -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
