How do I make a secure database in SQLite?

For instance. If I want to write to a SQLite db file, then I need to make the directory writable.

On the other hand, they say that you should not put the database in the webroot directory.

But even if I put the database in any other directory, I still need to give write access to that directory to allow apps to read and write to the database. Isn't that a kind of "chicken and egg" problem?

It's confusing the hell out of me.

IS there *ANY* way to write a secure SQLite application or simply forget the idea and go with MySQL or other?

Any help will be welcome.

You shouldn't need to make the directory writable, it should just need to be the file. SQLite uses filesystem permissions for security which should be at least as strong if not stronger than other authentication. You are correct about keeping it out of your webspace though, unless you want people to download it ofcourse.

I tried making the file writable and the directory non-writable. It doesn't work. I get a error whenever I try to update the database.

Of course, I have found a way out: Keep the db in a separate folder, use .htaccess to deny permissions to that folder and it works now.