title: Cpanel subdomain access to parent folder prevent
body: <p>For example:<br>
  I have "abc.com" and i use "cpanel"<br>
  In "cpanel -> Domains -> Subdomains"<br>
  i create<br>
  <b>Subdomain:</b> "x.abc.com"<br>
  <b>Document Root:</b> "/home/abc/public_html/hisfolder"</p>
  
  <p>And i will give this address to my customer<br><strong>i don't want he access to my other files except "hisfolder"</strong><br>
  He must only access with "ftp" to "hisfolder" and my Database.</p>
  
  <p>And i create In "cpanel -> Files -> Ftp Accounts"<br>
  <strong>Login:</strong> "hisname@abc.com"<br>
  <strong>Password:</strong> "*****"<br>
  <strong>Directory:</strong> "/home/abc/public_html/hisfolder"<br></p>
  
  <p>With "filezilla" or etc. he only access "hisfolder" he can't access to parent folders and files OK.<br>
  But when he write a ".php" file like:</p>
  
  <pre><code>&lt;?php
  $dir    = '../';
  $files = scandir($dir);
  print_r($files);
  
  $phpApiFile = file_get_contents('../api.php');
  echo $phpApiFile;
  ?&gt;
  </code></pre>
  
  <p>and upload to "/home/abc/public_html/hisfolder/index.php" he can now access to my files?</p>
  
  <ol>
  <li><strong>He should</strong> add his .php files and connect to database</li>
  <li><strong>He should not</strong> access to my files</li>
  </ol>
  
  <p>So how can i do this both agents? what am i do?</p>