Re: [PHP] world write access

2005-03-28 Thread Jochem Maas
Evert|Rooftop Solutions wrote: Thanx Johannes, how about making the webserver the owner of the files? Would that be a good idea? The problem is that I have a framework deployed at several clients. Because this are some big clients and demand high security they won't give me a login to their ftp

[PHP] world write access

2005-03-27 Thread Evert - Rooftop Solutions
Hi people, I'm trying to think of a way to make an auto-updater for my distributed scripts. If I wanted to do this, I'd have to give write access to the php scripts to the apache user or world. Everywhere I read that you shouldn't to that, but I'm thinking that if you script your stuff right,

Re: [PHP] world write access

2005-03-27 Thread Johannes Findeisen
Hello, It is generally not a good idea to make scripts to everybody writeable. I think that if you're implementing auto-update features in PHP scripts they only could be insecure. Okay, you have one more feature but what if this feature goes out of control? Be really carefull when writing such

Re: [PHP] world write access

2005-03-27 Thread Evert | Rooftop Solutions
Thanx Johannes, how about making the webserver the owner of the files? Would that be a good idea? The problem is that I have a framework deployed at several clients. Because this are some big clients and demand high security they won't give me a login to their ftp or consoles. Understandable,