Hi Matthew,

Thanks for the speedy resonse. I actually am setting suphp on a test server 
right now, but one of the items I was looking for was to jail users from a php 
standpoint similar to what suexec does for perl, i.e. can't write outside the 
users docroot, etc etc.

If I read suphp right, it does not do that. PLEASE correct me if I am wronge!

-Grant
  ----- Original Message ----- 
  From: Matthew A. Bockol 
  To: [email protected] ; Grant Peel 
  Sent: Monday, October 22, 2007 10:29 AM
  Subject: Re: [EMAIL PROTECTED] php and suexec



  Hi Grant,

  You might also consider suPHP (http://www.suphp.org). I don't use it myself, 
but it should do what you want. Otherwise, php in CGI mode is pretty simple. 

  1. don't load the libphp module in httpd.conf (or disable php for the 
directory containing the scripts you want to cgi exec).

  2. Add .php to the AddHandler cgi-script line in httpd.conf 

  3. Make sure Options ExecCGI is enabled for the directory where you're 
storing the scripts.

  4. Make sure the scripts have a #!/path/to/bin/php line at the top (I know 
this works in *nix, not sure about win32).

  Matt



  ----- Original Message -----
  From: "Grant Peel" <[EMAIL PROTECTED]>
  To: [email protected]
  Sent: Monday, October 22, 2007 9:21:40 AM (GMT-0600) America/Chicago
  Subject: [EMAIL PROTECTED] php and suexec

  Hi again all,

  Has anyone on this had succees setting up php to use (apache) suexec?

  If I am reading things right, it appears that php must be run as CGI and
  then it will use the built in (Apache2) suexec wrapper in the same fassion
  as perl does.

  If the above is correct I am looking for a primer on how to set this all up.

  TIA,

  -Grant



  ---------------------------------------------------------------------
  The official User-To-User support forum of the Apache HTTP Server Project.
  See <URL:http://httpd.apache.org/userslist.html> for more info.
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  " from the digest: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]



  ---------------------------------------------------------------------
  The official User-To-User support forum of the Apache HTTP Server Project.
  See <URL:http://httpd.apache.org/userslist.html> for more info.
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  " from the digest: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]


------------------------------------------------------------------------------
        Total Control Panel  Login  
        To: [EMAIL PROTECTED]  Message Score:  50   High (60): Pass  
        From: [email protected]  My Spam Blocking Level:  High  Medium 
(75): Pass  
             Low (90): Pass 
           Block messages from this sender (blacklist)    
          
        This message was delivered because the content filter score did not 
exceed your filter level.  

Reply via email to