Jump to content

How To Limit An FTP User To A Specific Directory?


Recommended Posts

Hi, The most common reason to restrict FTP users is to prevent them from making changes to certain parts of a website. Restricting access can also be useful if you want to make it possible for a user to upload media, but you don’t want to give them access to other areas.

But the most critical reason to restrict FTP users is security. An FTP user with full or root access can execute destructive commands. And while you may trust your users, what happens if their account is compromised? Perhaps they make a mistake or edit files by accident.

so i want ask if i can protect specific folders on my ftp account with password? is there software or code that can do this? cloudflare can do this? how?

Note : "Creating a New FTP User Account With Limited Access" this way will not help me, becaouse i want give access to 9 folders from 10 folders , and i cant move folders, and its not good idea to create 9 ftp user account.

Edited by naughtyking
Link to comment
Share on other sites

  • naughtyking changed the title to How To Limit An FTP User To A Specific Directory?

What you are saying "restrict access" is a bit confusing. The access can be read and write. It is very easy to restrict write access by manipulating file ownership. Typically KVS files are uploaded via FTP, which serves 2 things:

  1. Restrict web server from modifying KVS core files, so that an intruder cannot do much harm if there is a vulnerability found in KVS.
  2. Use this FTP account later to update KVS, e.g. re-write some system files with new versions and add new files.

In this case you can simply create another FTP username and this user will not be able to modify KVS system files that are protected.

If you mean restrict read access to certain directories, this won't be possible with FTP I guess. Read access is needed for all server users, including web server, to serve these files. What will probably help is some kind of external File manager script that can be installed on your server and can be configured with detailed restrictions what a user can read and modify.

  • Like 1
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Create New...