>> That's a potential security flaw waiting to happen. A script like this >> shouldn't be kept in a web-accessible directory. /var/www is not the document root. document root is /var/www/html so I dont think there's a problem. >> /var/www (usually your server root) I am mistaken regarding this. for details (the location of httpd.conf may vary depending on your distro, but it is definitely located in /etc/) $ cat /etc/passwd | grep apache $ cat /etc/httpd/conf/httpd.conf | grep ^ServerRoot $ cat /etc/httpd/conf/httpd.conf | grep ^DocumentRoot $ cat /etc/httpd/conf/httpd.conf | grep ^User >> I have no access to that directory. seems you do not have access to any directory other than /home/user. but i dont think there's a work around, you'll have to request your administrator to move that file to /var/www directory (and retain 777). >> ls, pwd, and other commands run fine. i dont think "ls /home/user" will work fine. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php