Re: Comments on PHP security

Hi Arnold, Alain, ----- Original Message ----- From: "Alain Williams" Sent: Wednesday, January 17, 2007 > On Wed, Jan 17, 2007 at 12:45:37AM +0100, Arnold Daniels wrote: > > Hi, > > [...] > > Last, I'm a software developer at a shared hosting company. To my > > opinion, making sure that users don't touch other people's files, does > > not belong in the PHP layer. With other apache modules you can do nasty > > thing as well. We (not me) have written a kernel patch to allow > > switching of the current processes (much like sudo) and a matching > > apache module. Since the privileges only allow the user or group to > > access the file, linux does the rest. An other solution is to start PHP > > as cgi under the correct user, but other things will never be really save. > > Care to share that with the world ? Yeah, I was gonna ask about that, too. :-) Sounds interesting! Matt