Re: Howto Execute PHP as script owner/group without CGI?

chris smith wrote:

On 3/22/06, Mathijs <m.v.veluw@smscity.nl> wrote:

chris smith wrote:

I Want to know if it is possible to execute PHP(5) as the owner/group of the script it self. At the moment saved files get owner and group nobody. When i upload through ftp, it gets the normal owner and group nobody. Is there a way that i can set both owner and group to 'myuser-groupname', and let apache or php execute it with that owner/group?

No. Only the 'root' user can change user/group. -- Postgresql & php tutorials http://www.designmagick.com/

That i know, But isn't there something like suexec or something for the apache module of php5 to let it execute as another user?

Some hosts let you compile your own cgi version to use instead of the main module and run everything through that instead of the apache module.. not sure if that's an option for you. What problem are you trying to solve exactly?

for one, security. Now group has write access else apache/php can't write to any file. Group is nobody, and therefore everybody who has an virtual-host can access the files as group. PHP Safe-mode is on, but this doesn't stop perl/cgi. I want it so that owner and group are both 500 for example. Thisway i can set some files to public read only, and no one can access the files anymore except the user him self :). Hope i put it right this way.