looking into a script for having staff

[blaqheartedstar]

its one thing to allow someone you trust access into your site via FTP
but one is good enough.

I'm opening a site that needs staff members and a pretty safe script or alternatives that can allow the people i hire access to only a portion (staff section) of the site.
one site i was with used Xanga for the staff members and they had to post their stuff there and he posted it into the site himself.


if no script any ideas? because I'm also working for a fanlisting site who needs staff.

[geg2]

You can setup users with ftp access for just one subdirectory of your site in cPanel;
cost = free
difficulty = medium

[Smurfwicked]

If they need FTP access and you only want them to have access to certain folders, you should be able to do this:

Make a subdomain for
ex. mysite.com/graphics/ to be graphics.mysite.com

then create a FTP login user name and password for that folder and give it to your staff.

If your host supports enough sub domains then you can go far as making ones for each graphics or layouts category like so:

ex. myspace.com/graphics/thanks-for-the-add/

Does that make sense?

I don't think a script would be the most secure way of granting people access to your server. And if they're going to be uploading a lot of content at one time it would be a lot better using a FTP client versus a web browser.

[84creations]

if you give someone access to a folder, cant they just upload a shell file or whatever those pages are that allow you to hack a site?

I know you can set the ftp account to only allow someone to view that folder, but if you upload a shell file, you can gain access to anywhere on the site, right???

[blaqheartedstar]

waa... ok so ftp or no? :s

[Smurfwicked]

I am not sure about somebody uploading a "shell" file to gain access to your servers root dir. However, I am assuming you have some trust in the people who are going to be your staff. Giving your staff access with a FTP account to a sub-domain is same risk of hosting somebody with a sub-domain or a domain cloaked sub-domain, and everybody does that.

So realistically I think your only concern would be that staff member deletes everything in that sub domain folder.

Be sure that you understand the subdomain is just made to give ftp access to certain folders on your site. Its not going to divide your site in any way and actually having sub domains to certain paths on your site might be helpful. But I wouldn't use them on site meaning:

Don't replace links like this:
mysite.com/layouts/skinny/
to:
skinnylayouts.mysite.com/

I hope this is all making sense, and to answer your question I think its best way for what your looking to achieve what your trying to do long as your host supports multiple subdomains.

[blaqheartedstar]

well i can always make a new folder called staff where they can upload whatever it is i need to them to upload. they won't have access to the main site just that staff folder.
But thanks for the ideas/tips! :balloon: