Re: restrict access of Copy command

Yep, that was most of the problem. I was coding and testing from one machine on my network so all the files had the same owner. When I changed the owner for the files for each virtual host to the user for that virtual hosts, and set permissions to 705, everything seems to work as it should. Now I need to learn how to "jail" the user in the FTP routine, and then I will have every one in a nice, secure, cozy pocket, I hope. Thanks very much for the help. Pan Sebastien Roy <sroy@galeasec.com> wrote in message news:3AF018D9.9FF64E4D@galeasec.com... > Hi > > I got the same setup as you with safe_mode = On and I try to use the copy > function between 2 virtual host. When I copy from one virtual host to another, > I got an error message telling me that the copy function is not allowed : > > Warning: SAFE MODE Restriction in effect. The script whose uid is 88 is not > allowed to access /home/host/yourdomain owned by uid 98 in > home/www/host/127.0.0.1:8080/html/index.php on line 37 > > His your virtual host have all the same users? > > > Regards, > > Sebastien Roy > > > PanDragon wrote: > > > Thanks for the suggestion, but I need to be able to use the copy command, I > > just do not want it to be able to read from one virtual host to another. I > > would imagine that lots of web hosters running php with virtual hosts would > > have the same problem. > > > > Sebastien Roy <sroy@galeasec.com> wrote in message > > news:<3AEF18F7.FB244BC5@galeasec.com>... > > > Hi, > > > > > > There is a section in the php.ini where you can specified the function you > > > don't whant to use : > > > > > > disable_functions : copy; ... > > > > > > I never used it, but I think it's what you are looking for. > > > > > > > > > Regards, > > > > > > Sebastien Roy > > > sroy@galeasec.com > > > > > > > > > PanDragon wrote: > > > > > > > I am running an apache server with virtual hosts and need to prevent the > > php > > > > Copy command from being able to copy from one virtual host dir to > > another. > > > > > > > > The server is in php safe mode and the doc_root, and basedir are set > > > > correctly, at least they prevent "includes" and "opendir" > > > > and such from > > > > working, but "copy" still works. > > > > > > > > I sure would appreciate any suggestions. > > > > > > > > Pan > > > > > > > > -- > > > > PHP General Mailing List (http://www.php.net/) > > > > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > > > > For additional commands, e-mail: php-general-help@lists.php.net > > > > To contact the list administrators, e-mail: php-list-admin@lists.php.net > > > > > > > > > -- > > > PHP General Mailing List (http://www.php.net/) > > > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > > > For additional commands, e-mail: php-general-help@lists.php.net > > > To contact the list administrators, e-mail: php-list-admin@lists.php.net > > > > > Sebastien Roy <sroy@galeasec.com> wrote in message > > news:3AEF18F7.FB244BC5@galeasec.com... > > > Hi, > > > > > > There is a section in the php.ini where you can specified the function you > > > don't whant to use : > > > > > > disable_functions : copy; ... > > > > > > I never used it, but I think it's what you are looking for. > > > > > > > > > Regards, > > > > > > Sebastien Roy > > > sroy@galeasec.com > > > > > > > > > PanDragon wrote: > > > > > > > I am running an apache server with virtual hosts and need to prevent the > > php > > > > Copy command from being able to copy from one virtual host dir to > > another. > > > > > > > > The server is in php safe mode and the doc_root, and basedir are set > > > > correctly, at least they prevent "includes" and "opendir" > > > > and such from > > > > working, but "copy" still works. > > > > > > > > I sure would appreciate any suggestions. > > > > > > > > Pan > > > > > > > > -- > > > > PHP General Mailing List (http://www.php.net/) > > > > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > > > > For additional commands, e-mail: php-general-help@lists.php.net > > > > To contact the list administrators, e-mail: php-list-admin@lists.php.net > > > > > > > > > -- > > > PHP General Mailing List (http://www.php.net/) > > > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > > > For additional commands, e-mail: php-general-help@lists.php.net > > > To contact the list administrators, e-mail: php-list-admin@lists.php.net > > > > > > > -- > > PHP General Mailing List (http://www.php.net/) > > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > > For additional commands, e-mail: php-general-help@lists.php.net > > To contact the list administrators, e-mail: php-list-admin@lists.php.net > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net >