[php] [Fwd: [PHP3] So called safe mode]

[Werner Stuerenburg]

This is a multi-part message in MIME format.
--------------7CF91A6DCDBF54108F707B8B
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

Ich glaube, der Beitrag aus dem Anhang aus der php3-Liste beschreibt
genau mein Problem. 

Vorher hatte ich meinen Support angeschrieben:

> > I am told that php3 runs as a specific user and perl as another; the
> > right of this user "perl" are sufficient to do everything
> > imaginable, but the right of user "php" not. This can be changed in
> > "httpd.conf".
> 
> No it can't.  We have php installed as an apache module, not as a cgi
> script, so it can only run as nobody.
> 
> > 
> > Where can I find this file (I couldn't find it yet), how do I
> > configure the entry in this file?
> > 
> 
> You don't have access, only root can make changes there.
> 
> John V.
> support

Ich kann keine einzige Datei lesen, es sei denn in meinem
Test-Verzeichnis, das 777 Rechte hat und in dem ich meine Dateien
selber angelegt habe. 

??? Das kann es doch nicht sein! Da muß ich doch wieder zu Perl
zurück! Oder wie? Warum kann ich mit include oder require Dateien
einbinden, sobald ich aber eine Datei in eine Variable lesen will,
geht es nicht?

<absolut verwirrt>

-- 
Mit freundlichem Gruss
Werner Stuerenburg

_____________________________________________________________
ISIS  Gesellschaft fuer Softwareentwicklung und -vertrieb mbH
Webdesign - Uhlandstr. 8  -  D-32120 Hiddenhausen  -  Germany
Tel. 0(049)5224-9974-07, Fax-09,  <mailto:ws_(at)_art-quarter.com>
-  <http://art-quarter.com>  -  <http://pferdezeitung.com>  -
--------------7CF91A6DCDBF54108F707B8B
Content-Type: message/rfc822;
 name="nsmailH2.TMP"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
 filename="nsmailH2.TMP"

Return-Path: <php3-return-39492-ws=art-quarter.com_(at)_lists.php.net>
Received: (from mail_(at)_localhost)
	by gorgon.host4u.net (8.8.5/8.8.5) id LAA00837
	for art-quarter_(at)_art-quarter.com; Wed, 2 Jun 1999 11:16:42 -0500
Received: from php.chek.com (php.chek.com [208.247.106.167])
	by gorgon.host4u.net (8.8.5/8.8.5) with SMTP id LAA00798
	for <ws_(at)_art-quarter.com>; Wed, 2 Jun 1999 11:16:35 -0500
Received: (qmail 13601 invoked by uid 510); 2 Jun 1999 15:16:18 -0000
Mailing-List: contact php3-help_(at)_lists.php.net; run by ezmlm
Delivered-To: mailing list php3_(at)_lists.php.net
Received: (qmail 13595 invoked from network); 2 Jun 1999 15:16:17 -0000
Message-ID: <17259F80B70ED311B2F50090276D7FBC401F_(at)_exec.ethernet>
From: Samuel J Liddicott <sam_(at)_campbellsci.co.uk>
To: php3_(at)_lists.php.net
Date: Wed, 2 Jun 1999 17:13:29 +0100 
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.1960.3)
Content-Type: text/plain
Subject: [PHP3] So called safe mode
X-Mozilla-Status2: 00000000

Safe mode can be a pain.

My apache web server runs as "nobody" and the files are owned by "web" -
very sensible - we don't want CGI's to be able to modify the web files!!

Trouble is, and files created by PHP are owned by nobody... which then
php refuses to open because the php programs are owned by web!

The only solutions are to disable safe mode, or to have the php scripts
owned by nobody - neither is ideal.

I think we need a httpd.conf/php3.ini ONLY configuartion directive to
list UID's not to be included in the safe mode test; thus I could say
that for my web, scripts in a web can always open files owned by nobody.

I know that it will be OK if user "web" owns the folder in which the
file exists, but we don't really want a seperate temporary folder for
each user that owns php scripts.

Sam

-- 
PHP 3 Mailing List (http://www.php.net/)
To unsubscribe, send an empty message to php3-unsubscribe_(at)_lists.php.net
To subscribe to the digest, e-mail: php3-digest-subscribe_(at)_lists.php.net
To search the mailing list archive, go to: http://www.php.net/mailsearch.php3
To contact the list administrators, e-mail: php-list-admin_(at)_lists.php.net


--------------7CF91A6DCDBF54108F707B8B--