Mailing List Archive

suEXEC on PHP files?
Hi

We develop a commercial site on Apache 1.3.22, PHP 4.1.0
and Red Hat Linux 7.2
In the Apache documentation I read something about the
suEXEC program.
In our site, we have to enable to our users to upload some
files via their browser.
They have an own directory structure under
htdocs/company/comp1.. comp2... and so on.
Can we use suEXEC somehow to protect the contents of their
directories from the other users?
I'm not sure, that it's a good question, because as I see
every files get the nobody UID as the owner.
Can I protect these files after all?

Thanks in advace!

Regards,

Istvan

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: suEXEC on PHP files? [ In reply to ]
suEXEC is for CGI scripts.

Takacs Istvan wrote:
>
> Hi
>
> We develop a commercial site on Apache 1.3.22, PHP 4.1.0
> and Red Hat Linux 7.2
> In the Apache documentation I read something about the
> suEXEC program.
> In our site, we have to enable to our users to upload some
> files via their browser.
> They have an own directory structure under
> htdocs/company/comp1.. comp2... and so on.
> Can we use suEXEC somehow to protect the contents of their
> directories from the other users?
> I'm not sure, that it's a good question, because as I see
> every files get the nobody UID as the owner.
> Can I protect these files after all?
>
> Thanks in advace!
>
> Regards,
>
> Istvan
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org