Re: [PHP] restrict access of Copy command

2001-05-04 Thread Pandrac

Yep, that was most of the problem. I was coding and testing from one machine
on my network so all the files had the same owner. When I changed the owner
for the files for each virtual host to the user for that virtual hosts, and
set permissions to 705, everything seems to work as it should.

Now I need to learn how to jail the user in the FTP routine, and then I
will have every one in a nice, secure, cozy pocket, I hope.

Thanks very much for the help.

Pan
Sebastien Roy [EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi

 I got the same setup as you with safe_mode = On  and I try to use the copy
 function between 2 virtual host. When I copy from one virtual host to
another,
 I got an error message telling me that the copy function is not allowed :

 Warning: SAFE MODE Restriction in effect. The script whose uid is 88 is
not
 allowed to access /home/host/yourdomain owned by uid 98 in
 home/www/host/127.0.0.1:8080/html/index.php on line 37

 His your virtual host have all the same users?


 Regards,

 Sebastien Roy


 PanDragon wrote:

  Thanks for the suggestion, but I need to be able to use the copy
command, I
  just do not want it to be able to read from one virtual host to another.
I
  would imagine that lots of web hosters running php with virtual hosts
would
  have the same problem.
 
  Sebastien Roy [EMAIL PROTECTED] wrote in message
  news:[EMAIL PROTECTED]...
   Hi,
  
   There is a section in the php.ini where you can specified the function
you
   don't whant to use  :
  
   disable_functions : copy; ...
  
   I never used it, but I think it's what you are looking for.
  
  
   Regards,
  
   Sebastien Roy
   [EMAIL PROTECTED]
  
  
   PanDragon wrote:
  
I am running an apache server with virtual hosts and need to prevent
the
  php
Copy command from being able to copy from one virtual host dir to
  another.
   
The server is in php safe mode and the doc_root, and basedir are set
correctly, at least they prevent includes and opendir and such
from
working, but copy still works.
   
I sure would appreciate any suggestions.
   
Pan
   
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail:
[EMAIL PROTECTED]
  
  
   --
   PHP General Mailing List (http://www.php.net/)
   To unsubscribe, e-mail: [EMAIL PROTECTED]
   For additional commands, e-mail: [EMAIL PROTECTED]
   To contact the list administrators, e-mail:
[EMAIL PROTECTED]
  
  Sebastien Roy [EMAIL PROTECTED] wrote in message
  [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
   Hi,
  
   There is a section in the php.ini where you can specified the function
you
   don't whant to use  :
  
   disable_functions : copy; ...
  
   I never used it, but I think it's what you are looking for.
  
  
   Regards,
  
   Sebastien Roy
   [EMAIL PROTECTED]
  
  
   PanDragon wrote:
  
I am running an apache server with virtual hosts and need to prevent
the
  php
Copy command from being able to copy from one virtual host dir to
  another.
   
The server is in php safe mode and the doc_root, and basedir are set
correctly, at least they prevent includes and opendir and such
from
working, but copy still works.
   
I sure would appreciate any suggestions.
   
Pan
   
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail:
[EMAIL PROTECTED]
  
  
   --
   PHP General Mailing List (http://www.php.net/)
   To unsubscribe, e-mail: [EMAIL PROTECTED]
   For additional commands, e-mail: [EMAIL PROTECTED]
   To contact the list administrators, e-mail:
[EMAIL PROTECTED]
  
 
  --
  PHP General Mailing List (http://www.php.net/)
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
  To contact the list administrators, e-mail: [EMAIL PROTECTED]


 --
 PHP General Mailing List (http://www.php.net/)
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 To contact the list administrators, e-mail: [EMAIL PROTECTED]




-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




Re: [PHP] restrict access of Copy command

2001-05-02 Thread Sebastien Roy

Hi

I got the same setup as you with safe_mode = On  and I try to use the copy
function between 2 virtual host. When I copy from one virtual host to another,
I got an error message telling me that the copy function is not allowed :

Warning: SAFE MODE Restriction in effect. The script whose uid is 88 is not
allowed to access /home/host/yourdomain owned by uid 98 in
home/www/host/127.0.0.1:8080/html/index.php on line 37

His your virtual host have all the same users?


Regards,

Sebastien Roy


PanDragon wrote:

 Thanks for the suggestion, but I need to be able to use the copy command, I
 just do not want it to be able to read from one virtual host to another. I
 would imagine that lots of web hosters running php with virtual hosts would
 have the same problem.

 Sebastien Roy [EMAIL PROTECTED] wrote in message
 news:[EMAIL PROTECTED]...
  Hi,
 
  There is a section in the php.ini where you can specified the function you
  don't whant to use  :
 
  disable_functions : copy; ...
 
  I never used it, but I think it's what you are looking for.
 
 
  Regards,
 
  Sebastien Roy
  [EMAIL PROTECTED]
 
 
  PanDragon wrote:
 
   I am running an apache server with virtual hosts and need to prevent the
 php
   Copy command from being able to copy from one virtual host dir to
 another.
  
   The server is in php safe mode and the doc_root, and basedir are set
   correctly, at least they prevent includes and opendir and such from
   working, but copy still works.
  
   I sure would appreciate any suggestions.
  
   Pan
  
   --
   PHP General Mailing List (http://www.php.net/)
   To unsubscribe, e-mail: [EMAIL PROTECTED]
   For additional commands, e-mail: [EMAIL PROTECTED]
   To contact the list administrators, e-mail: [EMAIL PROTECTED]
 
 
  --
  PHP General Mailing List (http://www.php.net/)
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
  To contact the list administrators, e-mail: [EMAIL PROTECTED]
 
 Sebastien Roy [EMAIL PROTECTED] wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Hi,
 
  There is a section in the php.ini where you can specified the function you
  don't whant to use  :
 
  disable_functions : copy; ...
 
  I never used it, but I think it's what you are looking for.
 
 
  Regards,
 
  Sebastien Roy
  [EMAIL PROTECTED]
 
 
  PanDragon wrote:
 
   I am running an apache server with virtual hosts and need to prevent the
 php
   Copy command from being able to copy from one virtual host dir to
 another.
  
   The server is in php safe mode and the doc_root, and basedir are set
   correctly, at least they prevent includes and opendir and such from
   working, but copy still works.
  
   I sure would appreciate any suggestions.
  
   Pan
  
   --
   PHP General Mailing List (http://www.php.net/)
   To unsubscribe, e-mail: [EMAIL PROTECTED]
   For additional commands, e-mail: [EMAIL PROTECTED]
   To contact the list administrators, e-mail: [EMAIL PROTECTED]
 
 
  --
  PHP General Mailing List (http://www.php.net/)
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
  To contact the list administrators, e-mail: [EMAIL PROTECTED]
 

 --
 PHP General Mailing List (http://www.php.net/)
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 To contact the list administrators, e-mail: [EMAIL PROTECTED]


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




[PHP] restrict access of Copy command

2001-05-01 Thread PanDragon

I am running an apache server with virtual hosts and need to prevent the php
Copy command from being able to copy from one virtual host dir to another.

The server is in php safe mode and the doc_root, and basedir are set
correctly, at least they prevent includes and opendir and such from
working, but copy still works.

I sure would appreciate any suggestions.

Pan



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




Re: [PHP] restrict access of Copy command

2001-05-01 Thread Sebastien Roy

Hi,

There is a section in the php.ini where you can specified the function you
don't whant to use  :

disable_functions : copy; ...

I never used it, but I think it's what you are looking for.


Regards,

Sebastien Roy
[EMAIL PROTECTED]


PanDragon wrote:

 I am running an apache server with virtual hosts and need to prevent the php
 Copy command from being able to copy from one virtual host dir to another.

 The server is in php safe mode and the doc_root, and basedir are set
 correctly, at least they prevent includes and opendir and such from
 working, but copy still works.

 I sure would appreciate any suggestions.

 Pan

 --
 PHP General Mailing List (http://www.php.net/)
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 To contact the list administrators, e-mail: [EMAIL PROTECTED]


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




Re: [PHP] restrict access of Copy command

2001-05-01 Thread PanDragon

Thanks for the suggestion, but I need to be able to use the copy command, I
just do not want it to be able to read from one virtual host to another. I
would imagine that lots of web hosters running php with virtual hosts would
have the same problem.




Sebastien Roy [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]...
 Hi,

 There is a section in the php.ini where you can specified the function you
 don't whant to use  :

 disable_functions : copy; ...

 I never used it, but I think it's what you are looking for.


 Regards,

 Sebastien Roy
 [EMAIL PROTECTED]


 PanDragon wrote:

  I am running an apache server with virtual hosts and need to prevent the
php
  Copy command from being able to copy from one virtual host dir to
another.
 
  The server is in php safe mode and the doc_root, and basedir are set
  correctly, at least they prevent includes and opendir and such from
  working, but copy still works.
 
  I sure would appreciate any suggestions.
 
  Pan
 
  --
  PHP General Mailing List (http://www.php.net/)
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
  To contact the list administrators, e-mail: [EMAIL PROTECTED]


 --
 PHP General Mailing List (http://www.php.net/)
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 To contact the list administrators, e-mail: [EMAIL PROTECTED]

Sebastien Roy [EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi,

 There is a section in the php.ini where you can specified the function you
 don't whant to use  :

 disable_functions : copy; ...

 I never used it, but I think it's what you are looking for.


 Regards,

 Sebastien Roy
 [EMAIL PROTECTED]


 PanDragon wrote:

  I am running an apache server with virtual hosts and need to prevent the
php
  Copy command from being able to copy from one virtual host dir to
another.
 
  The server is in php safe mode and the doc_root, and basedir are set
  correctly, at least they prevent includes and opendir and such from
  working, but copy still works.
 
  I sure would appreciate any suggestions.
 
  Pan
 
  --
  PHP General Mailing List (http://www.php.net/)
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
  To contact the list administrators, e-mail: [EMAIL PROTECTED]


 --
 PHP General Mailing List (http://www.php.net/)
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 To contact the list administrators, e-mail: [EMAIL PROTECTED]




-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]