[EMAIL PROTECTED] wrote: > Idea: On handling a file, setuid() to owner of file. On closing connection, > re-engage original uid (nobody, apache, www-data, whatever it is). PHP will > run under user's UID, other users are save.
The 'solution' is the perchild MPM ;) Or a dirty hack; run apache as root and let it change uid based on the url's owner or something like: <Directory /www/www.example.org/user/test/> User test Group users </Directory> Something like that would be quite nice too, perhost MPM only will be able to do per-vhost uid-changes. With some patches (which haven't been accepted yet) perchild will actually compile, run and work. Though the user-changes can't be made effective yet :( But that will be some of the things for next week ;) Greets, Jeroen
