Re: Shell script containing passwords.

2004-02-10 Thread Lowell Gilbert
Lewis Thompson [EMAIL PROTECTED] writes: I'm trying to write a script to use with the Apache auth plugin mod_auth_any. I have the whole setup working, bar the script that does the authentication. I am worried that because the script must be read/writeable by the Apache user (www) that

Re: Shell script containing passwords.

2004-02-10 Thread Lewis Thompson
On Tue, Feb 10, 2004 at 10:12:09AM -0500, Lowell Gilbert wrote: Lewis Thompson [EMAIL PROTECTED] writes: I am worried that because the script must be read/writeable by the Apache user (www) that anybody that can write a PHP script on my machine can read the auth script and read the

Re: Shell script containing passwords.

2004-02-10 Thread Peter Risdon
Lewis Thompson wrote: Hi, I'm trying to write a script to use with the Apache auth plugin mod_auth_any. I have the whole setup working, bar the script that does the authentication. I am worried that because the script must be read/writeable by the Apache user (www) that anybody that can write

Re: Shell script containing passwords.

2004-02-10 Thread Lewis Thompson
On Tue, Feb 10, 2004 at 03:56:08PM +, Peter Risdon wrote: Lewis Thompson wrote: I am worried that because the script must be read/writeable by the Apache user (www) that anybody that can write a PHP script on my machine can read the auth script and read the passwords that would be

Re: Shell script containing passwords.

2004-02-10 Thread Peter Risdon
Lewis Thompson wrote: On Tue, Feb 10, 2004 at 03:56:08PM +, Peter Risdon wrote: Lewis Thompson wrote: I am worried that because the script must be read/writeable by the Apache user (www) that anybody that can write a PHP script on my machine can read the auth script and read the

Re: Shell script containing passwords.

2004-02-10 Thread Jez Hancock
On Tue, Feb 10, 2004 at 04:06:37PM +, Lewis Thompson wrote: On Tue, Feb 10, 2004 at 03:56:08PM +, Peter Risdon wrote: snip Not that I know of, but have you considered compiling apache with suexec? Assuming your other users have seperate logins, this might work. You can have apache

Re: Shell script containing passwords.

2004-02-10 Thread Robert Barten
On Tue, Feb 10, 2004 at 03:28:14PM +, Lewis Thompson wrote: On Tue, Feb 10, 2004 at 10:12:09AM -0500, Lowell Gilbert wrote: Lewis Thompson [EMAIL PROTECTED] writes: I am worried that because the script must be read/writeable by the Apache user (www) that anybody that can write a

Re: Shell script containing passwords.

2004-02-10 Thread Lewis Thompson
On Tue, Feb 10, 2004 at 05:52:17PM +0100, Robert Barten wrote: No need for safe_mode, set php_admin_value open_basedir /www/dir/to/user/ in your vhost config, add if desired /tmp/phpupload/:/tmp/phpsession/ Yes, I've looked at this. However, I want to use userdir=public_html for serving PHP

Re: Shell script containing passwords.

2004-02-10 Thread Eric F Crist
On Tuesday 10 February 2004 09:28 am, Lewis Thompson wrote: On Tue, Feb 10, 2004 at 10:12:09AM -0500, Lowell Gilbert wrote: Lewis Thompson [EMAIL PROTECTED] writes: I am worried that because the script must be read/writeable by the Apache user (www) that anybody that can write a PHP

Re: Shell script containing passwords.

2004-02-10 Thread Lewis Thompson
On Tue, Feb 10, 2004 at 09:41:22AM -0600, Eric F Crist wrote: Check the syntax for the .htaccess files in the httpd.conf file. This is a file that must be non-readable by regular users via php, but apache has a filter written within the httpd.conf file to disallow access. I know it's about

RE: Shell script containing passwords.

2004-02-10 Thread Eric F Crist
yes Eric F Crist President AdTech Integrated Systems, Inc (612) 998-3588 -Original Message- From: Lewis Thompson [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 10, 2004 11:24 AM To: Eric F Crist Cc: [EMAIL PROTECTED]; Lowell Gilbert Subject: Re: Shell script containing passwords

Shell script containing passwords.

2004-02-09 Thread Lewis Thompson
Hi, I'm trying to write a script to use with the Apache auth plugin mod_auth_any. I have the whole setup working, bar the script that does the authentication. I am worried that because the script must be read/writeable by the Apache user (www) that anybody that can write a PHP script on my