Re: [SMARTY-DEV] Request for Discussion: use_sub_dirs' default value
| From: | messju mohr | Date: | Fri, 30 Jan 2004 09:27:20 +0000 |
| Subject: | Re: [SMARTY-DEV] Request for Discussion: use_sub_dirs' default value | ||
| References: | 1 2 | Groups: | php.smarty.dev |
| Request: | Send a blank email to php-smarty-dev+get-2083@lists.php.net to get a copy of this message | ||
On Fri, Jan 30, 2004 at 10:21:01AM +0100, Armand Turpel wrote:
> On Friday 30 January 2004 09:38, messju mohr wrote:
> > Hello,
> >
> > I often stumble over people who stumble over problems when it comes to
> > handling the templates_c-folder: Files can not be created (because of
> > safe_mode-restrictions) or files cannot be deleted (because there is
> > only ftp-access as a different user than the webserver is).
>
> I have often problems like this on shared servers which are misconfigured. It
> works only when every thing is on 0777 which should be not the case. Most
> webservers run under the user nobody and group nobody. Some ftp servers
> change the file rights while upload to user "userxxxx" group "nobody". The
> webserver should run php scripts under this rights. In this case there is no
> poblem to delete all files created by php scripts.
Schlund+Partner in Germany does it this way, for example. I think most
shared servrs don't do it, because it costs more resources to run a
suexec'ed php (as cgi) than to run a mod_php as nobody. And
resources==money for hosting companies.
> > These problems are easy to solve for experienced users, but hard for
> > beginners. I think the speed benefit of use_sub_dirs=true
> > vs. use_sub_dirs=false is only measurable when a huge number of
> > templates is used (maybe caused by a database-resource) or when
> > caching with a reasonable number of cache_ids is done. IMHO, these two
> > are advanced uses of smarty and people who do things like that can be
> > expected to turn use_sub_dirs on explicitely.
> >
> > Shouldn't Smarty come with $use_sub_dirs=false as default?
>
>
> I never understand why this feature is disabled on some servers? Where is the
> security problem to create subfolders from withhin php?
PHP wants you to prevent you from writing in the templates_c-folder of
your neighbour who is on the same shared host. Since both run as
nobody the crutch called "safe_mode" was invented.
> > greetings
> > messju