View previous topic :: View next topic |
Author |
Message |
madcat87 Tux's lil' helper
Joined: 11 Aug 2005 Posts: 120
|
Posted: Sat Mar 25, 2006 9:08 pm Post subject: Shell hosting and apache pid |
|
|
I am having a server and multiple users can connect to it with ssh.They have a maildir and a public_html dir in their HOMEDIRs.The problem is with the execution of php scripts through Apache. The problem is that the php scripts executed in ~/public_html are executed with the privilege of the Apache user Process.So every user can execute a script that can read in the homedirs of the other users.Is there any way to make Apache to execute this php files with the ID of the Owner not the user Apache apache is running as ?
Thanks |
|
Back to top |
|
|
eaglex n00b
Joined: 03 Dec 2005 Posts: 15
|
Posted: Sun Mar 26, 2006 9:27 am Post subject: |
|
|
Quote: | suPHP is a tool for executing PHP scripts with the permissions of their owners. It consists of an Apache module (mod_suphp) and a setuid root binary (suphp) that is called by the Apache module to change the uid of the process executing the PHP interpreter. |
http://www.suphp.org/Home.html |
|
Back to top |
|
|
|