Re: [PHP] PHP as apache module and security.

2001-05-06 Thread Andrzej Swedrzynski
On Sun, 6 May 2001, Estelle Martin wrote: > What do you think about the following configuration: > 1) safe-mode on : this ensures that a php script can read only files that > are owned by the same Unix user on the machine; then just check that people > having a right to use php and mysql on your

Re: [PHP] PHP as apache module and security.

2001-05-06 Thread Estelle Martin
Hi, What do you think about the following configuration: 1) safe-mode on : this ensures that a php script can read only files that are owned by the same Unix user on the machine; then just check that people having a right to use php and mysql on your box have all a different corresponding Unix use

[PHP] PHP as apache module and security.

2001-05-06 Thread Andrzej Swedrzynski
Hello! Recently someone asked how to ensure that no one will read pasĀ­ sword from php file. The only response I noticed was to create group and add apache user (often nobody) to that group. I consiĀ­ dered this and I can not see what would stop other users from writing php script (run