Ok, so I have linux hosting for my php site.
I have googled for a good while, but I cannot come up with the answer.
How would I make a script that I could insert some PHP code, but the script could not read or write to other files, especially higher level files?
I understand that allowing executable code inputted into a file is dangerous, but I was wondering someone knew the best way to prevent it from reaching outside the file.
On shared webhosting – without access to the root level – this is going to be impossible.
By default, PHP scripts will be running under a specific user account. That user account (often the webserver’s) has to have access to all PHP files. There is no combination of rights settings that can change this fundamental fact.