How can I forbid PHP to access other folders?

I am using GoDaddy shared Linux hosting and I hosted multiple domains with the same machine. Last week, one of my WordPress sites was infected with malware. Then this worm code spread to my all domains instantly.

How can I forbi开发者_开发问答d to access other domains (folders) from a domain (folder)? Perhaps I can put something in my php.ini?

---

I think your only chance to do that on shared hosting is the open_basedir setting.

In each web root, create a .htaccess file containing the following:

php_admin_value open_basedir /path/to/current/web/site

if this works, every fopen(), include() etc. access outside /path/to/current/web/site should fail with an error message.

It can be that your provider has disabled this possibility - if they have, it'll be silently ignored. It could also be that an open_basedir has already been set centrally for all your sites. That setting could be inherited, rendering any further settings moot. You'll have to try out.

---

I'd contact the godaddy support and inquire about using htaccess to restrict access.

• http://www.yorku.ca/computng/students/webpages/central_web/htaccess.html