Re: restricting filesystem access
| From: | Daniel Brown | Date: | Tue, 01 Apr 2008 15:07:59 +0000 |
| Subject: | Re: restricting filesystem access | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-272406@lists.php.net to get a copy of this message | ||
On Tue, Apr 1, 2008 at 10:04 AM, Richard Lynch <ceo@l-i-e.com> wrote:
>
> PHP runs as the Apache user.
>
> chown/chmod the source files to not be writable by that user.
>
> Problem solved.
Let's not ignore phpSuExec or suhosin, which are fast-becoming
standard. If I'm not mistaken, they're even the defaults for
cPanel/Plesk and others now, too.
--
</Daniel P. Brown>
Forensic Services, Senior Unix Engineer
1+ (570-) 362-0283