note 17178 deleted from security.apache by irc-html
| From: | irc-html@php.net | Date: | Wed, 02 Jan 2002 04:59:24 +0000 |
| Subject: | note 17178 deleted from security.apache by irc-html | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-24186@lists.php.net to get a copy of this message | ||
This is a frustrating situation. I am
glad to see that I am not the only
person who is finding that the single
httpd/user solution appears to be the
only way to allow access to mod_php with
multiple virtual hosts on a site ... the
CGI idea is good but then we have the
huge performance hit on the server from
the fork and execs ... I hope people
with other solutions will post here! :)
My POP thought the single httpd/user
instance was a reasonable workaround
for the security issue ...
As a reminder for others, do NOT pursue
any solutions that involve running
Apache as root and trying to then get
it drop permissions for each virtual
user so that mod_php and other modules
cannot read across vhost accounts ...
nice theory, BAD practice!