RE: [PHP4BETA] Re: [PHP-DEV] You should not have to choose

At 17:27 19/11/1999 , Samuel Liddicott wrote:

-----Original Message----- From: Zeev Suraski [mailto:bourbon@netvision.net.il] Sent: Friday, November 19, 1999 01:12 PM To: Joel Jacobson Cc: php4beta@lists.php.net; php-dev@lists.php.net Subject: [PHP4BETA] Re: [PHP-DEV] You should not have to choose You're wrong, there's no way of solving this. Some basic knowledge of UNIX would hint you that you cannot in any way change between user-id's, back and forth, without forking processes. And avoiding process forking is exactly what the module version of PHP is all about. *cough* I learned how to do this with the perl 4 manpage. Of course it makes use of uid and euid, but your statement is a little misleading - anyway Samba does it all the time. But yes; for security reasons uid=root is not the kind of think you like to do when running user code (UNlike samba).

You can play with uid/euid a lot, but it security wise, the way of doing things here would be going all the way in a non reversible way, otherwise it defeats the purpose. The way I see it, it cannot be done. Zeev -- Zeev Suraski <zeev@zend.com> http://www.zend.com/