Re: Scripts run as a specific user.

kul. security issues involved with running standalone php are the same as running any other cgi program. surely someone has already discussed cgi security issues on this list, so do a search on www.php.net and see what comes up. -angelko On Fri, 20 Oct 2000, Timothy A. DeWees wrote: > I interpreted no dis, I really just need a direction. The rest I can > handle from there. Are there any known security problems with running PHP > as a stand alone program? Thanks for all of your help, and weather you > believe me or > not, it has helped me greatly. I have a project at work involving a really > big customer that wants to use PHP, http://www.cantonrep.com, > to upload some > files, and your direction has helped me give them a feasable solution. > > > ----- Original Message ----- > From: Angelko Krstanovic <angelko@saw.net> > To: Timothy A. DeWees <whtdrgn@mail.cannet.com> > Cc: <php-general@lists.php.net> > Sent: Thursday, October 19, 2000 6:13 PM > Subject: Re: [PHP] Scripts run as a specific user. > > > > you will need to read about the methods of php installation > > in the documentation that comes with the php source > > distribution. > > > > i don't mean to diss you. there really is a great deal of > > good info in the installation documentation. > > > > -angelko > > > > On Thu, 19 Oct 2000, Timothy A. DeWees wrote: > > > > > I am looking for a script to run a s specific user to get > fopen("filename", > > > "w"); to work. I cannot create a file in a > > > certain directory because user nobody does not have access to that > > > directory. When you say stand alone app, what > > > does that mean? How would I get Apache to use it then? Will that > hinder > > > the performance of Apache? Thank you > > > all for you help, I really do apretiate the quick response I get from > this > > > list :-) > > > > > > Thanks, > > > > > > ----- Original Message ----- > > > From: Angelko Krstanovic <angelko@saw.net> > > > To: Timothy A. DeWees <whtdrgn@mail.cannet.com> > > > Cc: Brad Handy <bhandy@jack-of-all-trades.net>; > <php-general@lists.php.net> > > > Sent: Thursday, October 19, 2000 3:01 PM > > > Subject: Re: [PHP] Scripts run as a specific user. > > > > > > > > > > if you do a search on php mail archive, you will find that > > > > suexec will work for php if php is compiled as a standalone > > > > app, but it will not work if it runs as a module. > > > > > > > > another option besides suexec is a cgi wrapper called cgiwrap. > > > > it too will work only with cgi scripts. > > > > > > > > if you need to run php as a module, and are able to install > > > > your own web server (apache?) then you can specify a user > > > > under which the web server process (in unix) will run. > > > > > > > > -angelko > > > > > > > > On Thu, 19 Oct 2000, Timothy A. DeWees wrote: > > > > > > > > > The apache suExec directive will execute all CGI processes as the > user > > > you > > > > > specify with the "User" directive. This is not working. Doed > > > > > PHP > count > > > as > > > > > CGI resources? > > > > > > > > > > in my httpd.conf file I have the following. > > > > > > > > > > <VirtualHost 208.155.248.53:80> > > > > > User americalist > > > > > Options FollowSymLinks Indexes ExecCGI > > > > > DocumentRoot /u/www/<DOMAIN>/www > > > > > ErrorDocument 404 /redirect.php > > > > > ServerName <DOMAIN sorry wont give this out> > > > > > ErrorLog "|/usr/local/sbin/cronolog > > > > > /u/www/logs/test.americalist.com/%Y-%merror.log" > > > > > CustomLog "|/ust/local/sbin/cronolog > > > > > /u/www/logs/test.americalist.com/%Y-%maccess.log" combined > > > > > </VirtualHost> > > > > > > > > > > any suggestions. > > > > > > > > > > ----- Original Message ----- > > > > > From: Brad Handy <bhandy@jack-of-all-trades.net> > > > > > To: Timothy A. DeWees <whtdrgn@mail.cannet.com> > > > > > Sent: Thursday, October 19, 2000 3:55 PM > > > > > Subject: RE: [PHP] Scripts run as a specific user. > > > > > > > > > > > > > > > > There is a setting in the Apache Web Server's configuration file > that > > > can > > > > > > set the UID of the process to that of the scripts owner. I don't > > > recall > > > > > > what that parameter is, but it does exist, > > > > > > > > > > > > Regards, > > > > > > Brad Handy > > > > > > > > > > > > > > > > -------------------------------------------------------------------------- > > > > > -- > > > > > > Bradley M. Handy | Email: brad@synergysoup.com > > > > > > Director of Internet Programming | Phone: (517) 371-7830 > > > > > > Synergy Soup Interactive | (877) 371-7830 > > > > > > 831 N. Washington Avenue | > > > > > > Lansing, MI 48906 | > > > > > > > > > > > > -----Original Message----- > > > > > > From: Timothy A. DeWees [mailto:whtdrgn@mail.cannet.com] > > > > > > Sent: Thursday, October 19, 2000 9:44 AM > > > > > > To: php-general@lists.php.net > > > > > > Subject: [PHP] Scripts run as a specific user. > > > > > > > > > > > > Hello, > > > > > > > > > > > > Is there any way for me to run a PHP script as a specified > user, > > > or as > > > > > > the user who owns the script. If you have a solution for me can > you > > > > > please > > > > > > reply to this email address whtdrgn@cannet.com (I am not on the > list). > > > > > > Thanks in advanced, and good luck. > > > > > > > > > > > > > > > > > > -- > > > > > > Kind Regards, > > > > > > Timothy A. DeWees > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > PHP General Mailing List (http://www.php.net/) > > > > > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > > > > > For additional commands, e-mail: php-general-help@lists.php.net > > > > > To contact the list administrators, e-mail: > php-list-admin@lists.php.net > > > > > > > > > > > > > > >