Re: mod_perl and mysql
On Wed, May 21, 2003 at 08:03:10AM -0500, John Basso wrote:
> The web server is working, serves html content and provides access
> control to the golf member portions. The problem I am having is that
> when my mod_perl scripts try to access the database I get an
> "access denied - no login provided" error message.
>
> I have given user "nobody" access permission to the golf db with no
> password specified. (I assume this is ok as user "nobody" cannot log
> into the machine).
"nobody" should never be given write permission to any files; some
daemons run as that user and you don't want a compromise there to affect
more than it has to. Doesn't the web server run as "www-data" rather
than "nobody"?
Cheers,
--
Colin Watson [cjwatson@flatline.org.uk]
Reply to: