Re: controlling ownership on file uploads ...
| From: | Ernest E Vogelsinger | Date: | Wed, 27 Nov 2002 19:32:15 +0000 |
| Subject: | Re: controlling ownership on file uploads ... | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-126340@lists.php.net to get a copy of this message | ||
At 20:27 27.11.2002, Kenn Murrah spoke out and said:
--------------------[snip]--------------------
>but if i don't have the permissions to do that ... ???
--------------------[snip]--------------------
Since the Apache user ("www" in your case) owns the file it will always be
able to delete it again. If "www" doesn't have permissions to run chmod
there's not a lot that can be done. You may not chown a file to any other
user except yourself (unless you're root), or to any group you're not
member of. You need to check what groups the "www" user is member of.
In short - if you can create the file, you can delete it as well. (At least
that's what I've learned).
--
>O Ernest E. Vogelsinger
(\) ICQ #13394035
^ http://www.vogelsinger.at/