Re: mkdir security concern

From: Date: Fri, 21 Jan 2005 01:24:14 +0000
Subject: Re: mkdir security concern
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-206903@lists.php.net to get a copy of this message
So your suggestion is that I should create an ftp account and use this account to create folder structure for user right? I still not sure about the permission to set. If I set 0755 how do OS know who is the owner? May be I think too much. But let say I use ftp account: ftp1 to create folder structure That mean owner is ftp1 user right? And then later I use PHP file upload script to upload image to user folders what will happen? "Marek Kilimajer" <lists@kilimajer.net> wrote in message news:41EF9165.6040500@kilimajer.net... > kids_pro wrote: >> Hi there, >> >> I want to create a script. >> When user register I want to create a folder : >> users\<new_user_folder>\images >> The purpose is that I want to allow them to upload image to this image >> folders. >> >> What sort of permission should I give to each folder >> Root: users, <new_user_folders>, and images folder. >> > > The least necessary. That depends on your server setup, primarily the user > id your scripts are run under (mod_php/cgi or suexec). You might want to > use ftp functions to create the directories if they would be created with > apache as the owner otherwise.

« previous php.general (#206903) next »