If I do that then I would have to set the permissions for my home directory at whatever permissions I have for these files. As I mentioned though, I am not well informed on chmoding, but to me that sounds like it could be problematic. Also, in the event that someone were to hack into my account, wouldn't it be bad to have active php files in the home directory?
Here is the reason for my problem:
I have some forms on my site that are open for users to submit content to. The form results were being written into a php file as values for variables (like this...
fwrite("\$myVariable = \"$_POST[form_field]\";");
). The reason for not just using SQL is because there is some code that gets written into the file and which codes are written varies depending on the form values, so it just seemed like it would be a lot easier to do it all from the php file. There is also a function that takes the entire file as a parameter. Then I was concerned that these php files might be easy targets for any hackers. So I changed the extension to something random. But that ended up much worse because with the php files if you put the address into the browser it was only a blank page that came up, with the unrecognized extension it pops up with the option to either open or download the file to your computer. Resulting in the entire contents of that php file being visible to anyone who knows the address.
So that makes it seem like no matter where I put these files with the new extension it ends more risky than the origional .php files unless I can configure it to act just like a php file. Would it be ok to have the php files in there like I origionally had?