[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: safe PHP scripts execution?



On Sat, Jul 28, 2001 at 12:56:28AM +0200, Marcin Owsiany wrote:
> Hi!
> 
> Does anybody happen to know some feature that would allow PHP
> scripts to be executed by a user different than www-data?
> Something like suexec...
> 
> Or am I wrong thinking that you can't write to your files
> using PHP without either:
>  1. chmod o+w file
> or
>  2. sudo adduser user www-data; chmod g+w file
> or
>  3. administrator intervence for each file
>     (chgrp www-data file ; chmod g+w file)
> 
> (All three of them are bad security, if the user wants to
> protect the file from being written to by others)
> 
> Marcin
> PS: Sorry for the strange language. I'm sleepy :-\
> -- 

Look up php safe_mode this is similar to suexec.

> Marcin Owsiany <porridge@pandora.info.bielsko.pl>
> http://student.uci.agh.edu.pl/~porridge/
> GnuPG: 1024D/60F41216  FE67 DA2D 0ACA FC5E 3F75  D6F6 3A0D 8AA0 60F4 1216
> 
> 
> --  
> To UNSUBSCRIBE, email to debian-isp-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org



Reply to: