RE: [cobalt-users] PHP Effective UID vs. CGI effectiv UID

["Greg O'Lone" <greg@xxxxxxxxxxxxxxxx>]

> -----Original Message-----
> From: cobalt-users-admin@xxxxxxxxxxxxxxx 
> [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of bib
> Sent: Sunday, April 13, 2003 8:07 AM
> To: cobalt-users@xxxxxxxxxxxxxxx
> Subject: [cobalt-users] PHP Effective UID vs. CGI effectiv UID
> 
> 
> Dear all,
> Still a newbe in managing a RaQ550 and apache, i've made some 
> verifications on the way the http server execute user scripts 
> (php and cgi).
> 
> A) cgi-wrapper seems to change effective UID to the site-owner of the 
> script. OK here.
> B) On the other hand, PHP scripts seems all to be running 
> under 'httpd' 
> user, which i don't like to much.
> 
> Will forcing PHP through suEXEC do the job ?
> Are there known side effects with the cobalt system setup ?
> Is there another way for forcing PHP engine to change EUID to 
> the script 
> owner before execution ?
> 
> Many thanks in advance for your tips
> Kindest regards
> Bertrand
> 

There appears to be a directive in PHP to do this for you...

http://www.php.net/manual/en/features.safe-mode.php

--
Greg O'Lone, President
Stretched Out Software, Inc
http://www.stretchedout.com