Re[3]: [PHP-DEV] safe_mode and file upload

On Sun, 13 Jan 2002, Rasmus Lerdorf wrote: > At http://www.snert.com/Software/mod_become/index.shtml that it > kills it > off after each request. So I guess that was a local change. Indeed it is. > > I still don't know about running my httpd as root though. That would > worry me quite a bit. I know, but the guy is now working on running apache as nobody again (it's started as root, but swaps to nobody immediately). I don't know what his progress is though. Derick > > -Rasmus > > On Sun, 13 Jan 2002 derick@php.net wrote: > > > On Sun, 13 Jan 2002, Rasmus Lerdorf wrote: > > > > > I have looked at mod_become before, but I really don't see any advantage > > > to it over CGI as it kills off the httpd process after any request. If > > > each httpd only handles one request, how is it an improvement on cgi? > > > > > > Or have I misunderstood how mod_become works? > > > > Yeah, _our_ mod_become swaps between user ids. If the standard mod_become > > does not do that, than our sysadm coded that. (I'm unclear what he did > > exactly). But we have it running on our production machine now, without > > any problems. > > > > regards, > > > > Derick > > >