Re: [PHP] Files created by PHP/Apache

2003-07-30 Thread Joachim
Curt Zirzow wrote: > * Thus wrote Joachim ([EMAIL PROTECTED]): >> > Yes that is a big security hole. There are some hosting solutions, >> > I cant really help you there, but this concept I think should work >> > would be: >> > [...] >> > user/group: $virtualuser/apache >> >> Hmm, well. It may be

Re: [PHP] Files created by PHP/Apache

2003-07-30 Thread Curt Zirzow
* Thus wrote Joachim ([EMAIL PROTECTED]): > Curt Zirzow wrote: > > >> This way, it seems to me like security hole, because I have to > >> use 0777 while creating, then everybody could do everything with > >> the files. Well, there is the open_basedir setting, put then, > >> what's about other user

Re: [PHP] Files created by PHP/Apache

2003-07-30 Thread Joachim
Curt Zirzow wrote: >> This way, it seems to me like security hole, because I have to >> use 0777 while creating, then everybody could do everything with >> the files. Well, there is the open_basedir setting, put then, >> what's about other user doing other things (not PHP)? >> > > Yes that is a

Re: [PHP] Files created by PHP/Apache

2003-07-30 Thread Curt Zirzow
* Thus wrote Joachim ([EMAIL PROTECTED]): > Cpt John W. Holmes wrote: > > >> So in fact the script has to run with the rights of the user > >> web2?? > > Perhaps > >> it does, but files/dirs are create with owner apache. > > > > PHP runs as a module inside of apache, so any files it creates > > a

Re: [PHP] Files created by PHP/Apache

2003-07-30 Thread Joachim
Cpt John W. Holmes wrote: >> So in fact the script has to run with the rights of the user web2?? > Perhaps >> it does, but files/dirs are create with owner apache. > > PHP runs as a module inside of apache, so any files it creates are owned > by the Apache user. That's the way it works. > > If y

Re: [PHP] Files created by PHP/Apache

2003-07-30 Thread CPT John W. Holmes
> I've got a problem with preconfigured server (Apache 1.3/MySQL 3/PHP 4): > > Files and directories created by a PHP script are always owned by the apache > user and apache group. But the script itself is inside of a virtualhost > which has another user and group (web2 / ftponly)! > > So in fact t

[PHP] Files created by PHP/Apache

2003-07-30 Thread Joachim
Hi! I've got a problem with preconfigured server (Apache 1.3/MySQL 3/PHP 4): Files and directories created by a PHP script are always owned by the apache user and apache group. But the script itself is inside of a virtualhost which has another user and group (web2 / ftponly)! So in fact the sc