Re: php and suexec

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Matthew,
 
 
Thanks for the speedy resonse. I actually am setting suphp on a test server right now, but one of the items I was looking for was to jail users from a php standpoint similar to what suexec does for perl, i.e. can't write outside the users docroot, etc etc.
 
If I read suphp right, it does not do that. PLEASE correct me if I am wronge!
 
-Grant
----- Original Message -----
Sent: Monday, October 22, 2007 10:29 AM
Subject: Re: php and suexec


Hi Grant,

You might also consider suPHP (http://www.suphp.org). I don't use it myself, but it should do what you want. Otherwise, php in CGI mode is pretty simple.

1. don't load the libphp module in httpd.conf (or disable php for the directory containing the scripts you want to cgi exec).

2. Add .php to the AddHandler cgi-script line in httpd.conf

3. Make sure Options ExecCGI is enabled for the directory where you're storing the scripts.

4. Make sure the scripts have a #!/path/to/bin/php line at the top (I know this works in *nix, not sure about win32).

Matt



----- Original Message -----
From: "Grant Peel" <gpeel@xxxxxxxxxxxxx>
To: users@xxxxxxxxxxxxxxxx
Sent: Monday, October 22, 2007 9:21:40 AM (GMT-0600) America/Chicago
Subject: [users@httpd] php and suexec

Hi again all,

Has anyone on this had succees setting up php to use (apache) suexec?

If I am reading things right, it appears that php must be run as CGI and
then it will use the built in (Apache2) suexec wrapper in the same fassion
as perl does.

If the above is correct I am looking for a primer on how to set this all up.

TIA,

-Grant



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


Total Control Panel Login
To: gpeel@xxxxxxxxxxxxx Message Score: 50 High (60): Pass
From: users@xxxxxxxxxxxxxxxx My Spam Blocking Level: High Medium (75): Pass
    Low (90): Pass
  Block messages from this sender (blacklist)
 
This message was delivered because the content filter score did not exceed your filter level.

[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux