php-install Digest 27 Dec 2002 14:27:11 -0000 Issue 1174
Topics (messages 9442 through 9444):
Re: PHP scripts use/get passed root's environment?
9442 by: Terrence Koeman
Re: PHP on IIS
9443 by: Kevin
Apache version
9444 by: Nuno Lopes
Administrivia:
To subscribe to the digest, e-mail:
[EMAIL PROTECTED]
To unsubscribe from the digest, e-mail:
[EMAIL PROTECTED]
To post to the list, e-mail:
[EMAIL PROTECTED]
----------------------------------------------------------------------
--- Begin Message ---
Hi,
At my box the sub-processes run as user www with uid 80, and that will
be the owner of created files also. Still I am worried, because the
apache master process runs as root, then spawns sub-processes as user
www and these sub-processes spawn the PHP processes as user www also,
yet they get root's environment? That seems totally wrong, because if
the PHP process gets root's environment, then who know's what it gets
from root besides that.
When I search for other phpinfo pages I find zillions with a 'healthy'
enviroment for the scripts like the second url (phpinfo2.html) and
thus far I have found none that look like mine. Yes, you tell me that
yours looks like mine, but I'm not convinced that it should be like
this though.
And in the event that it is not harmful, then I am still curious what
causes this difference.
Regards,
Terrence Koeman
On Mon, 23 Dec 2002 22:41:13 -0500, [EMAIL PROTECTED] (John) wrote:
>My phpinfo() section looks pretty much the same as yours.
>
>I think PHP is not actually running as root--if you look in the Apache
>section, you should find a User/Group section that has the actual user
>account PHP uses. Mine lists nobody(99)/99, and that's the owner of any
>files I create from a PHP page...
>
>Apache is generally started by root, and then spawns sub-processes
>running as a non-privileged user. These sub-processes handle the actual
>requests. It looks to me that Apache doesn't change the system
>environment for these sub-processes--it just changes the user account
>they run under.
>
>Hope that helps,
>John Locke
>http://freelock.com
>
>Terrence Koeman wrote:
>
>>PHP 4.2.3 on Apache 1.3.27 on FreeBSD 4.7-STABLE;
>>Apache runs with uid/gid 80/80 and php is loaded as module.
>>
>>For some reason all PHP scripts on my box run in root's environment
>>instead of one created by apache.
>>
>>This is the environment section from phpinfo:
>>http://ra.phid.ae/phpinfo.html
>>
>>And I guess it should look like this: http://ra.phid.ae/phpinfo2.html
>>
>>The issue remains if I rename the php.ini to something else to get the
>>default values and restart apache.
>>
>>CGI scripts (perl) have the right environment, so i'm pretty sure it's
>>a PHP thing.
>>
>>Any ideas? Thanks in advance.
>>
>>
>>
>
>
--- End Message ---
--- Begin Message ---
hi. Nick
I did exactly what you described, but php is still not working on IIS 6.
when I try to access .php file, it give me this message:
"Security Alert! The PHP CGI cannot be accessed directly.
This PHP CGI binary was compiled with force-cgi-redirect enabled. This means
that a page will only be served up if the REDIRECT_STATUS CGI variable is
set, e.g. via an Apache Action directive.
For more information as to why this behaviour exists, see the manual page
for CGI security.
For more information about changing this behaviour or re-enabling this
webserver, consult the installation file that came with this distribution,
or visit the manual page."
I am new to php, please point me to the right direct about php on IIS 6. thx
Kevin
"Nick H. -- Technical Support Engineer" <[EMAIL PROTECTED]> wrote in
message 000501c2ab9d$5c72fc90$0401a8c0@nh2">news:000501c2ab9d$5c72fc90$0401a8c0@nh2...
> I have posted the solution to this on the php-windows mailing list. When
> you install PHP on .Net (rather, IIS 6.0) you have to manually add in the
> ISAPI or CGI into the IIS Control Panel. Once you have done that, there
is
> a "Web Service Extensions" or something to that effect in the IIS Control
> Panel. You have to manually setup a rule to allow the php.exe to run.
Once
> you have this done, php should be able to run without problem. If you
need
> any further help, please feel free to contact me and I'll walk you through
> the setup.
>
>
> Nick "Harm" Hale
> [EMAIL PROTECTED]
>
--- End Message ---
--- Begin Message ---
Hi,
What is the version of apache supported by the isapi module in PHP 4.2.3 ??
And when will be availiable support for apache 2.0.43??
Thanking in advance,
Nuno Lopes
--- End Message ---
