Re: Security question with PHP on Unix / Linux.

"Ananth Kesari" <hyanantha@novell.com> wrote... : > Thanks for your inputs. Will proceed from here. > > Well, if you did not know, NetWare is an operating system brought out > by Novell. I know :) > We are working on porting PHP onto NetWare. In fact, we > already have ported PHP 4.2.3 onto NetWare and we have synched up our > souces for the 4.3 branch. Interesting. Are you working with the php-dev team or on your own? -- Maxim Maletsky maxim@php.net > >>> Maxim Maletsky <maxim@php.net> 02/04/03 08:45PM >>> > > "Ananth Kesari" <hyanantha@novell.com> wrote... : > > > > I am working on porting PHP onto NetWare. > > What exactly do you mean? > > > I am newbie to Unix / Linux systems and at this point of time, I am > > trying to understand the way security is implemented for PHP on Unix > / > > Linux. I mean, how are the different users distinguished from Unix / > > Linux. > > From PHP's point of view, every PHP process will run as apache's > process, with apache's user. Most often nobody' or > apache'. > > > Do they get to login into the Unix / Linux system? > > No. > > > Do they have > > separate data space for each user? > > No. Only sessions, if you use them. Sessions have their own unique IDs > and are stored in a certain directory by default. A database solution > can also be implemented. > > > What is the API that is used to login to Unix / Linux. > > There is no login to the Unix / Linux. You might write one on your > own, > if you wish, but that would be your thing. PHP as it is, logs nobody > to > the Linux, it runs everybody's request as Apache's user. > > > User may enter his username and password on the > > browser, but how do they get translated onto the Unix / Linux box? > > Whatever inputted to the broswer, is send to your script. Stays up to > you to decide what to do with the user/pass. Basically, you would > usually store the credentials in a database and then authenticate the > users against the database, not Linux Shell itself. > > > Since I am a newbie, I may have misunderstood some concepts here. > > Most of them. PHP is a programming language, not a shell interface or > something. Stays up to you what to do once user runs your PHP script. > > > -- > Maxim Maletsky > maxim@php.net > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php >