In a shared environment...
| From: | Bill Leonard | Date: | Thu, 19 Sep 2002 12:44:40 +0000 |
| Subject: | In a shared environment... | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-116865@lists.php.net to get a copy of this message | ||
Hi all,
Relative newbie here, and I am just coming to grips with something that I
think is a very bad thing... Please tell me I am wrong.
When using PHP, it is the Apache user that actually performs things, and
therefore needs permissions. For example, if I want to write data to a file,
I have to chmod o+w the directory it's in to get that to happen.
The trouble with this, is a shared environment, doesn't this give anyone who
can use PHP on your system the ability to write over any other user's file
if they know the name of it? Am I missing something fundamental here?
Any help would be appreciated!
Bill
--
Bill Leonard bill@machinemen.com