Re: phpUpLoad
| From: | Morgan Hughes | Date: | Thu, 01 Jan 1970 00:00:00 +0000 |
| Subject: | Re: phpUpLoad | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-125641@lists.php.net to get a copy of this message | ||
On Fri, 22 Nov 2002, Adam Williams wrote:
> You either need to make the directory 777 or change the ownership of the
> dir to apache or nobody (depending on which user httpd runs as)
> Adam
... or use a wrapper SUID to the user or group who owns the dir and have
it wrap a back-end script that actually does the work. I've used this
effectively, and so long as the back-end script is properly written I
believe it's a very secure method.
--
Morgan Hughes
C programmer and highly caffeinated mammal.
kyhm@kyhm.com
ICQ: 79293356