Re: Security
| From: | Peter Clarke | Date: | Mon, 20 Jan 2003 17:49:27 +0000 |
| Subject: | Re: Security | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-132272@lists.php.net to get a copy of this message | ||
Phil Ewington wrote:
Hi, Can PHP run as a different user for different sites on the same server. The reason I ask is a client that has a PHP web site on our RAQ4 has had a PHP application written by someone else and wants us to upload it. Can PHP be configured to allow certain web sites access to files and directories within their web root only? TIA Phil Ewington Technical DirectorHave a look at open_basedir, it won't run as a different user but it will restrict the files the site can access. http://www.php.net/manual/en/features.safe-mode.php#AEN5968 This can be set for each VirtualHost in apache's httpd.conf php_admin_value open_basedir /path/to/accessable/files Peter Clarke