Site lockdown / Security

[Guest]

Hi everyone,

 

My site is almost complete and i'm now looking to lock it down.

 

My server is hosted by myself i.e. a room in my house, so the physical security is "ok"

I'm using Windows 2003 Server & IIS 6, the admin side is protected by IP restriction(internal network only) & authentication.

 

What's the best method to lockdown the catalog? I'm quite new to PHP & MYSQL, but am I ok to make the .php & html files as read only? In other words does the running site require write permissions to any files other than the SQL database?

 

I've seen things about making files 777 or 444 but these don't apply to windows.

 

Hope someone can help.

 

Thanks

 

Trev

[Guest]

double post :(

 

Sorry, had net problems when posting