munk.me.uk forum
May 21, 2012, 05:29:22 am *
Welcome, Guest. Please login or register.

Login with username, password and session length
News: SMF - Just Installed!
 
   Home   Help Search Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: suPHP running on server  (Read 2061 times)
munk
Administrator
Sr. Member
*****

Karma: +2/-0
Offline Offline

Posts: 368


View Profile WWW
« on: July 22, 2003, 07:07:35 am »

PHP is now running in CGI mode on all websites served from this server in conjunction with suPHP.

By way of background, suPHP is a cgi wrapper for the PHP cgi binary which allows PHP scripts to be executed with the effective user id (EUID) of the owner of the script.  This has benefits such as:

  • allowing users to create files from PHP scripts which are owned by them (instead of the apache httpd user)
  • allowing email sent from PHP scripts to have the 'return-path:' header set to that of the owner of the script (previously all PHP scripts that used the mail function had the 'return-path' header set to 'www@munk.nu' which meant any bounced mails did not get returned to the owner of the scripts that they originated from)
  • allowing users to set permissions on sensitive PHP files so that only they can view them

These are the main reasons for moving to using PHP as a cgi with suPHP.

To work correctly however, scripts must NOT be writeable by anyone other than the owner, if you have problems with your scripts (HTTP 500 Errors), please check that the scripts aren't writeable by others (either group or other).

There may be other problems as well and this is really just a test to see how suPHP goes... please post in the support forum if you have problems.
 
« Last Edit: January 19, 2007, 03:28:40 am by munk » Logged

~ Jez
munk
Administrator
Sr. Member
*****

Karma: +2/-0
Offline Offline

Posts: 368


View Profile WWW
« Reply #1 on: July 22, 2003, 11:33:54 am »

For now this feature is 'off', appears to have a fairly large security problem currently on FreeBSD.
Logged

~ Jez
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.13 | SMF © 2006-2011, Simple Machines LLC Valid XHTML 1.0! Valid CSS!