How do I prevent other users on an Apache virtual host from reading my scripts via php?
Identify the group that apache runs as, then chown the directories 0750 and files 0640 after chgrp’ing them all to the same apache group, and you’re set. I have my apache run as user apache and group webdev and permissions at 0570/0460 respectively, which allows apache to read and everyone in webdev to write. however, no-one else has permissions.
