Re: restrict access of Copy command
| From: | Sebastien Roy | Date: | Wed, 02 May 2001 14:25:30 +0000 |
| Subject: | Re: restrict access of Copy command | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-51155@lists.php.net to get a copy of this message | ||
Hi
I got the same setup as you with safe_mode = On and I try to use the copy
function between 2 virtual host. When I copy from one virtual host to another,
I got an error message telling me that the copy function is not allowed :
Warning: SAFE MODE Restriction in effect. The script whose uid is 88 is not
allowed to access /home/host/yourdomain owned by uid 98 in
home/www/host/127.0.0.1:8080/html/index.php on line 37
His your virtual host have all the same users?
Regards,
Sebastien Roy
PanDragon wrote:
> Thanks for the suggestion, but I need to be able to use the copy command, I
> just do not want it to be able to read from one virtual host to another. I
> would imagine that lots of web hosters running php with virtual hosts would
> have the same problem.
>
> Sebastien Roy <sroy@galeasec.com> wrote in message
> news:<3AEF18F7.FB244BC5@galeasec.com>...
> > Hi,
> >
> > There is a section in the php.ini where you can specified the function you
> > don't whant to use :
> >
> > disable_functions : copy; ...
> >
> > I never used it, but I think it's what you are looking for.
> >
> >
> > Regards,
> >
> > Sebastien Roy
> > sroy@galeasec.com
> >
> >
> > PanDragon wrote:
> >
> > > I am running an apache server with virtual hosts and need to prevent the
> php
> > > Copy command from being able to copy from one virtual host dir to
> another.
> > >
> > > The server is in php safe mode and the doc_root, and basedir are set
> > > correctly, at least they prevent "includes" and "opendir" and
> > > such from
> > > working, but "copy" still works.
> > >
> > > I sure would appreciate any suggestions.
> > >
> > > Pan
> > >
> > > --
> > > PHP General Mailing List (http://www.php.net/)
> > > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
> > > For additional commands, e-mail: php-general-help@lists.php.net
> > > To contact the list administrators, e-mail: php-list-admin@lists.php.net
> >
> >
> > --
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
> > For additional commands, e-mail: php-general-help@lists.php.net
> > To contact the list administrators, e-mail: php-list-admin@lists.php.net
> >
> Sebastien Roy <sroy@galeasec.com> wrote in message
> news:3AEF18F7.FB244BC5@galeasec.com...
> > Hi,
> >
> > There is a section in the php.ini where you can specified the function you
> > don't whant to use :
> >
> > disable_functions : copy; ...
> >
> > I never used it, but I think it's what you are looking for.
> >
> >
> > Regards,
> >
> > Sebastien Roy
> > sroy@galeasec.com
> >
> >
> > PanDragon wrote:
> >
> > > I am running an apache server with virtual hosts and need to prevent the
> php
> > > Copy command from being able to copy from one virtual host dir to
> another.
> > >
> > > The server is in php safe mode and the doc_root, and basedir are set
> > > correctly, at least they prevent "includes" and "opendir" and
> > > such from
> > > working, but "copy" still works.
> > >
> > > I sure would appreciate any suggestions.
> > >
> > > Pan
> > >
> > > --
> > > PHP General Mailing List (http://www.php.net/)
> > > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
> > > For additional commands, e-mail: php-general-help@lists.php.net
> > > To contact the list administrators, e-mail: php-list-admin@lists.php.net
> >
> >
> > --
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
> > For additional commands, e-mail: php-general-help@lists.php.net
> > To contact the list administrators, e-mail: php-list-admin@lists.php.net
> >
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
> For additional commands, e-mail: php-general-help@lists.php.net
> To contact the list administrators, e-mail: php-list-admin@lists.php.net