Re: PHP user rights
| From: | Joerg Schlichenmaier | Date: | Fri, 20 Oct 2000 07:22:00 +0000 |
| Subject: | Re: PHP user rights | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-21336@lists.php.net to get a copy of this message | ||
Just change the user and/or group of the apache-server. In the httpd.conf are
two entries: User and Group. Just set them to what the apache shall be.
Chris wrote:
>>
>> Hi!
>>
>> We recntly installed PHP4 on our webserver on FreeBSD using Apache 1.3.12
>> Everything is just work fine BUT
>> since we do webhosting we found out that mod_php/the apache is running in
>> group nobody.
>> That enables every customer to spy and even write into directories they
>> shouldn't have access to.
>>
>> Have you guys any hint, how to solve this security problem?
>>
>> Chris
>>
>>
---------------------------------------------------
Tel.: (49)7150/393394 Parity Software GmbH
Fax.: (49)7150/393351 Stuttgarter Strasse 42/2
E-Mail: js@parity-soft.de D-71701 Schwieberdingen
---------------------------------------------------