> * Thus wrote Lowell Allen ([EMAIL PROTECTED]):
>> My commercial host is set up with the public root directory, "public_html",
>> owned by user: userid, group: nobody. Directories I create within
>> public_html are owned by user: userid, group: userid. As a result, PHP does
>> not have permission
* Thus wrote Lowell Allen ([EMAIL PROTECTED]):
> My commercial host is set up with the public root directory, "public_html",
> owned by user: userid, group: nobody. Directories I create within
> public_html are owned by user: userid, group: userid. As a result, PHP does
> not have permission to cre
My commercial host is set up with the public root directory, "public_html",
owned by user: userid, group: nobody. Directories I create within
public_html are owned by user: userid, group: userid. As a result, PHP does
not have permission to create files or write to files in public_html, but it
does
On Friday, April 19, 2002, at 02:44 PM, ROBERT MCPEAK wrote:
> Isn't it quite common to have php creating/editing/deleting files on
> the server? How is this done in a secure manner?
Running Apache/PHP as 'nobody' isn't really that secure, since there may
be other services running on the sys
Craig, you seem very knowledgable and I appreciate your help. I
confused matters by mentioning the word "upload." I'm actually not
using php to upload the files. The user ftps the files to the server,
and the ownership permissions prevent php from manipulating the files.
I'm looking for a clea
> How? Manually each time a file is uploaded? Or with PHP somehow?
>
> I appreciate your response, but perhaps I'm not clear enough.
>
> Isn't it quite common to have php creating/editing/deleting files on
> the server? How is this done in a secure manner?
>
> Could you explain further?
Well t
>>> "Dave Raven" <[EMAIL PROTECTED]> 04/19/02 01:55PM >>>
chown them to nobody.
- Original Message -
From: "ROBERT MCPEAK" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, April 19, 2002 7:53 PM
Subject: [PHP] php permiss
On Friday, April 19, 2002, at 01:53 PM, ROBERT MCPEAK wrote:
> My sysadmin is hesitant to give php more access until I do some
> research about the security issues involved, and I am a relative newbie
> and I'm not sure what the issues are or how to find out more about
> them.
>
> How do I give
chown them to nobody.
- Original Message -
From: "ROBERT MCPEAK" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, April 19, 2002 7:53 PM
Subject: [PHP] php permissions
> php is running on our box as nobody:nogroup. I'm trying to write php
>
php is running on our box as nobody:nogroup. I'm trying to write php
code that will edit/delete files uploaded to the server by other users,
and, obviously, I get a permissions error.
My sysadmin is hesitant to give php more access until I do some
research about the security issues involved, an
10 matches
Mail list logo