Apache2/PHP permissions in ISP environment

From: Simon (dev_at_networker.co.nz)
Date: 06/13/05

  • Next message: David R. Litwin: "Ifconfig" 
    Date: Mon, 13 Jun 2005 17:06:58 +1200
To: debian-user@lists.debian.org

    Hi there, we are running debian sarge for a virtual hosting box. PHP
    safe mode is on for all users with a host of other php_admin_values etc.
    We are running name based virtual hosting for all hosts except SSL hosts
    which have their own IP... We are using pureftpd for our FTP server,
    with the u/p in a mysql database and chrooting the users in their dir.

    Currently the server runs as the debian default of www-data.www-data..
    and the users are all loggin in as www-client(1000).www-data..

    So, when PHP creates a file 'test.txt' (www-data.www-data), a script
    uploaded via FTP 'alterfile.php' (www-clients.www-data) cant
    change/delete the generated file 'test.txt'.

    i have setup the users etc up like that as the users FTP into a
    directory: /www/www.exmaple.com/, in that dir there are: backups/,
    htdocs/, logs/, statistics/, ssl/. they can read everything, but only
    write to htdocs/.

    Does anyone have any suggestions on how to get around the above problem?

    How do i allow users to create files (with PHP) with the user of
    www-data, but still restrict some other directorys from writing?

    Is this a bad thing in the first place?

    Simon 

    -- 
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  • Next message: David R. Litwin: "Ifconfig"

    Relevant Pages

    • Re: Apache2/PHP permissions in ISP environment
      ... we are running debian sarge for a virtual hosting box. ... PHP ... > We are running name based virtual hosting for all hosts except SSL hosts ...
      (Debian-User)
    • Re: Relative paths in require_once problem (possibly all include routines)
      ... but when you are on virtual hosting, the only way you can modify ... You just have to have PHP installed as an ISAPI app - not a CGI. ... so I can't fiddle the install. ... the file to another directory without having to modify your code? ...
      (comp.lang.php)
    • Re: Recommended Windows Hosts
      ... BTW...how come PHP sites always have that similar cool "look" about them? ... | | I have all of my clients paying directly for their hosting. ... | | FrontPage Resources, WebCircle, MS KB Quick Links, etc. ... | | | recommendations for WINDOWS Hosts. ...
      (microsoft.public.frontpage.client)
    • Re: PHP Multi-threading
      ... George Maicovschi wrote: ... action on lets say 100 different hosts in the same time. ... multi-threading ar a way to emulate it. ... Basically that's my approach to multi-threading emulation in PHP. ...
      (comp.lang.php)
    • Re: PHP security (or the lack thereof)
      ... But in the 1990s, Java was created. ... That PHP is relatively new with respect to computing ... PHP-CGI: .28 million hosts ... average "experience level" of each developer is equal, ...
      (Bugtraq)