[PHP] Re: Security

[Peter Clarke]

Phil Ewington wrote:

Hi,

Can PHP run as a different user for different sites on the same server. The
reason I ask is a client that has a PHP web site on our RAQ4 has had a PHP
application written by someone else and wants us to upload it. Can PHP be
configured to allow certain web sites access to files and directories within
their web root only?

TIA

Phil Ewington
Technical Director

Have a look at open_basedir, it won't run as a different user but it will restrict the files the site can access.
http://www.php.net/manual/en/features.safe-mode.php#AEN5968
This can be set for each VirtualHost in apache's httpd.conf
php_admin_value open_basedir /path/to/accessable/files

Peter Clarke


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php