Re: SuExec issues

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 2/7/07, Kövesdán Gábor <gabor.kovesdan@xxxxxxxxxxxx> wrote:
Joshua Slive schrieb:
> On 2/7/07, Kövesdán Gábor <gabor.kovesdan@xxxxxxxxxxxx> wrote:
>> However, if I set modes for the files
>> to 600, i get 403. I don't see why this is happening, since the pages
>> should be read/run as foo.
>
> Do you understand that suexec affects only CGI scripts and not normal
> requests or requests served by apache modules?  Are you running php as
> a CGI?
Oh, I didn't know that, sorry. I run php with mod_php, not as pure CGI.
Is there any tool for doing the same for mod_php?

There are various ways to accomplish this.  Which works best depends
on the number of different users you host, and the demands of the php
scripts they use.

The simplest thing to do is simply to run the CGI version of php
rather than mod_php.  It should be fast enough for most simple sites.
(There is a mod_suphp available that makes the setup of php-cgi +
suexec a little simpler, but I'd recommend just using the regular
versions.)

For sites requiring something faster, you can run multiple instances
of apache under different userids with a reverse proxy in front:
http://wiki.apache.org/httpd/Recipes/Different_UserIDs_Using_Reverse_Proxy
(This obviously only works with a limited number of separate users.)

Or, you can use php as a CGI plus fastcgi.  This is good for sites
that have not-too-many separate users and a mix of php and non-php
content.

(Hmmm... After writing all that, somebody ought to make a wiki page
someplace with a list like this.)

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux