ID:               24604
 Comment by:       paulo dot matos at fct dot unl dot pt
 Reported By:      timo dot hummel at 4fb dot de
 Status:           Wont fix
 Bug Type:         Documentation problem
 Operating System: SuSE Linux 8.2 Linux 2.4.19
 PHP Version:      Irrelevant
 New Comment:

A workaround/solution to this problem on *nix

Assuming that httpd server runs as apache/apache (uid/gid), and php
script is user/group. 

1) php.ini
safe_mode = On
safe_mode_gid = On

2) Create initial data directory, on install phase as:

mkdir /path/to/datadir
chown user.group /path/to/datadir
chmod 2777 /path/to/datadir

3) Create all subdirectories (within php), like:
mkdir(/path/to/datadir/subdir, 02777);

This way all subdirectry will inherit group from initial parent dir and
SAFE_MODE won't complain, since all subdirs
and files will be apache.group.

IMPORTANT NOTE: After any subdirectory creation you shouldn't change
directory permissions, otherwise it will loose
the GID bit and all files/subdirectories created afterwards won't have
group inherited!


Previous Comments:
------------------------------------------------------------------------

[2004-09-25 01:50:23] anton dot php at titov dot net

http://www.titov.net/safemodepatch/ - this patch should allow you to
write to directories, created by PHP.

------------------------------------------------------------------------

[2004-08-07 17:27:48] [EMAIL PROTECTED]

Behavior of move_uploaded_file() with safe_mode is already described.

Functions affected by safe_mode have already a note about safe_mode.

safe_mode_gid is also already documented: "However, there may be
environments where a strict UID check is not appropriate and a relaxed
GID check is sufficient. This is supported by means of the
safe_mode_gid switch. Setting it to On performs the relaxed GID
checking, setting it to Off (the default) performs UID checking."

I suppose that the behavior of safe_mode is not going to change
according proposal 1.

------------------------------------------------------------------------

[2004-07-16 15:12:14] bramspam at pandora dot be

This is a pretty old bug, so has this been fixed yet? My webhost is
running a pretty darned old PHP version, but I don't see the point in
bugging them to upgrade of this bug isn't fixed yet ..

------------------------------------------------------------------------

[2004-05-31 09:37:18] real763 at uni dot de

uhm thats not great

ftp doenst work , and CGI is not running, too :(

Warning: ftp_connect() [function.ftp-connect]:
php_network_getaddresses: getaddrinfo failed: Name or service not known
in /home/www/htdocs/myhost.com/bla.php on line 382

@develop: plz upgrade SAFE_MODE : - )

------------------------------------------------------------------------

[2004-03-01 02:31:19] timo dot hummel at 4fb dot de

>It makes no sense to let users create
> a dir and not let them write to it.

Well, that's another thing. It's probably about the umask, however,
most providers and/or distribution builders should take care of this,
but aren't.

------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
    http://bugs.php.net/24604

-- 
Edit this bug report at http://bugs.php.net/?id=24604&edit=1

Reply via email to