One module I saw someday on my list of new packages on Debian:

from apt-cache show apache2-mpm-itk
Description: multiuser MPM for Apache 2.2
 The ITK Multi-Processing Module (MPM) works in about the same way as the
 classical "prefork" module (that is, without threads), except that it
allows
 you to constrain each individual vhost to a particular system user. This
 allows you to run several different web sites on a single server without
 worrying that they will be able to read each others' files.
 .
 Please note that this MPM is highly experimental, and is not from the same
 tree as the other MPMs.

The day it becomes "stable" it can be a nice thing, but for now the most
secure way is FastCGI ;)

About:
> Having two options is better than having only one. :)

Sure, but not if one of the two options means that your application is
readable by **any** user on that system (remember: you would need to give
'www-data' privileges to read you application data, which means that **ANY**
user could also read your app. data) which means that on a shared hosting
scenario **THis is not an option**

It can be on a private/dedicated server but **never** on a shared hosting,
on the most simple case the use of mod_python would allow any user on the
system to read your settings.py and you know what's on settings.py...
(database_password, etc ...).

On 5/4/07, Graham Dumpleton <[EMAIL PROTECTED]> wrote:
>
>
> On May 4, 7:31 pm, "Marc Fargas Esteve" <[EMAIL PROTECTED]> wrote:
> > Has far as I know you cannot run mod_python applications as different
> users,
> > everything runs as the web server user except with some experimental
> module
> > around there, if this is the case, I would not go for mod_python.
>
> Which experimental module are you talking about? Do you mean the
> Apache PerChild MPM which was supplied in Apache 2.0 but was removed
> in Apache 2.2? My understanding is that PerChild wasn't viewed as
> being stable enough for mainstream use and why it was removed from
> Apache. Thus, not perhaps a good idea that it be used.
>
> Graham
>
>
> >
>

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to