There are plenty of ways to make PHP secure for virtual hosting. I
personally prefer a separate Apache instance for each virtualhost where
each instance runs as that customer's own UNIX user id. Then standard
Linux filesystem security can be applied.
A nice way to achieve this is to use a rever
Hi,
> I'm administrating a server with many virtual hosts. To get rid of some
> security holes i enabled safe_mode. But after that php scripts weren't
> able to handle (read, move, copy, delete...) uploaded files and files
> which have been created by the script itself.
mod_php is *NOT* suitabl