Re: secret data for php pages

2000-06-09 Thread Robert Varga
If php is called as a cgi then it can be run setuid via suexec anyway. What I was looking for was a way to provide some information preload during the time when apache is still root for the php3 module, since modules run as www-data. There was another suggestion for running several instances of

Re: secret data for php pages

2000-06-08 Thread Christian Hammers
Hello > Is there a way in which I can store some data (eg. mysql passwords) safely > from other users on a website and retrieve it from php3/4? There exists a patch that allowes apache to run every virtual host in a seperated chrooted environment under a different UID. This involves that php has t

Re: secret data for php pages

2000-06-07 Thread cfm
On Wed, Jun 07, 2000 at 09:05:29PM +0200, Robert Varga wrote: > > > On Wed, 7 Jun 2000 [EMAIL PROTECTED] wrote: > > > On Wed, Jun 07, 2000 at 08:23:18PM +0200, Robert Varga wrote: > > > > > > Store the mysql connection information in a PHP file in the webspace. I > > > > often create a file db

Re: secret data for php pages

2000-06-07 Thread Gerard MacNeil
On Wed, 7 Jun 2000, Robert Varga wrote: > On Wed, 7 Jun 2000, Fraser Campbell wrote: > > > Robert Varga wrote: > > > > > What I need is a way to provide separate mysql databases to all > > > virtualhosts and webserver users, without a possibility for them to access > > > each other's databases.

Re: secret data for php pages

2000-06-07 Thread Robert Varga
On Wed, 7 Jun 2000 [EMAIL PROTECTED] wrote: > On Wed, Jun 07, 2000 at 08:23:18PM +0200, Robert Varga wrote: > > > > Store the mysql connection information in a PHP file in the webspace. I > > > often create a file db_config.php3 and it looks like this: > > > > > > > > $dbhost = "localhos

Re: secret data for php pages

2000-06-07 Thread cfm
On Wed, Jun 07, 2000 at 08:23:18PM +0200, Robert Varga wrote: > > Store the mysql connection information in a PHP file in the webspace. I > > often create a file db_config.php3 and it looks like this: > > > > > $dbhost = "localhost"; > > $dbuser = "someuser"; > > $dbpasswd = "somepass

Re: secret data for php pages

2000-06-07 Thread Robert Varga
Unfortunately we are serving only web- and mail services currently and we don't have an ip-block, only one server. Regards, Robert Varga On Wed, 7 Jun 2000, Sean 'Shaleh' Perry wrote: > >> apache runs as the vhost user. One apache daemon group per v host. > >> > > > > Nope. It may be true f

Re: secret data for php pages

2000-06-07 Thread Sean 'Shaleh' Perry
>> apache runs as the vhost user. One apache daemon group per v host. >> > > Nope. It may be true for ip-based virtual hosts, but surely not for > namebased virtual hosts. > we ran IP based, I assumed most people did, sorry. Guess you just have to cross your fingers and hope.

Re: secret data for php pages

2000-06-07 Thread Robert Varga
On Wed, 7 Jun 2000, Sean 'Shaleh' Perry wrote: > > On 07-Jun-2000 Robert Varga wrote: > > > > > > On Wed, 7 Jun 2000, Sean 'Shaleh' Perry wrote: > > > >> > >> On 07-Jun-2000 Robert Varga wrote: > >> > > >> > That is not the same problem. When I refer on users, they are meant as > >> > syst

Re: secret data for php pages

2000-06-07 Thread Sean 'Shaleh' Perry
On 07-Jun-2000 Robert Varga wrote: > > > On Wed, 7 Jun 2000, Sean 'Shaleh' Perry wrote: > >> >> On 07-Jun-2000 Robert Varga wrote: >> > >> > That is not the same problem. When I refer on users, they are meant as >> > system users on the webserver, not web visitors. >> > >> > What I need is a

Re: secret data for php pages

2000-06-07 Thread Robert Varga
On Wed, 7 Jun 2000, Fraser Campbell wrote: > Robert Varga wrote: > > > What I need is a way to provide separate mysql databases to all > > virtualhosts and webserver users, without a possibility for them to access > > each other's databases. > > Create a unique database for each site. Grant a

Re: secret data for php pages

2000-06-07 Thread Robert Varga
On Wed, 7 Jun 2000, Sean 'Shaleh' Perry wrote: > > On 07-Jun-2000 Robert Varga wrote: > > > > That is not the same problem. When I refer on users, they are meant as > > system users on the webserver, not web visitors. > > > > What I need is a way to provide separate mysql databases to all > >

Re: secret data for php pages

2000-06-07 Thread Fraser Campbell
Robert Varga wrote: > What I need is a way to provide separate mysql databases to all > virtualhosts and webserver users, without a possibility for them to access > each other's databases. Create a unique database for each site. Grant access to it from localhost (and others if necessary) to a un

Re: secret data for php pages

2000-06-07 Thread Sean 'Shaleh' Perry
On 07-Jun-2000 Robert Varga wrote: > > That is not the same problem. When I refer on users, they are meant as > system users on the webserver, not web visitors. > > What I need is a way to provide separate mysql databases to all > virtualhosts and webserver users, without a possibility for them

Re: secret data for php pages

2000-06-07 Thread Robert Varga
That is not the same problem. When I refer on users, they are meant as system users on the webserver, not web visitors. What I need is a way to provide separate mysql databases to all virtualhosts and webserver users, without a possibility for them to access each other's databases. Regards, Rob

RE: secret data for php pages

2000-06-07 Thread Robert Varga
On Wed, 7 Jun 2000, Sean 'Shaleh' Perry wrote: > > On 07-Jun-2000 Robert Varga wrote: > > > > Is there a way in which I can store some data (eg. mysql passwords) safely > > from other users on a website and retrieve it from php3/4? > > > > include the files from your script. The file can be

RE: secret data for php pages

2000-06-07 Thread Sean 'Shaleh' Perry
On 07-Jun-2000 Robert Varga wrote: > > Is there a way in which I can store some data (eg. mysql passwords) safely > from other users on a website and retrieve it from php3/4? > include the files from your script. The file can be elsewhere, the server just has to be able to get to it.

secret data for php pages

2000-06-07 Thread Robert Varga
Is there a way in which I can store some data (eg. mysql passwords) safely from other users on a website and retrieve it from php3/4? The site is running php3 or php4 as an apache_module, and I need to provide separate mysql databases for each users inaccessible to all other users, so each user's