[PHPLIB] Re: mysql + php3 + apache questions From: sinisa <email protected>
Date: 12/10/99

jcc <email protected> writes:
> hello
>
> I am currently running an Sun Ultra2 with fully patched installation
> of Solaris 7. The following packages have been installed on it:
> apache1.3.3
> php3.05
> mysql3.22.27
>
> I have three main questions. Two pertain to mysql and the final deals
> with php and mysql. Answers/ideas/suggestions to any of these would
> be greatly appreciated.
>
> - Is there a way to get mysql to use the system's PAM stuff in
> addition to passwords stored in a mysql table? Has this been done
> before? If so, how?
>
> - Can MySql be run so that it creates database files with some owner
> other than mysql (root, dba or mysqladmin)? We use a script which
> does a "ln -s" so the database is stored to the person's home dir
> and we fix up the modes, owner, and group. Is there a better way to
> do this or a way for mysqld to safely do this? If so, how?
>
> - Is there a way to have world-readable php3 web pages access mysql
> tables without putting a username and password in the php page?
> Different php3 pages should be able to use diffent mysql usernames
> and passwords for different permission restrictions. Since the php3
> pages are readable by httpd, (i.e. world readable on a timeshared
> machine) we don't want to have username/passwords in the php3 source
> page.
>
>
> --
> Jack
>
>
>

Hi!

Regarding your first question, no MySQL is just using it's stored
passwords. It just authenticates users that login , and do not forget
that user in mysql is actually user <email protected> Why would it need to use
local PAM stuff ??

MySQL always creates directories with a single mask, I think it is
755 and with the owner with whose uid a server is running. If you make
manual changes, you just have to ensure that server can read / write
to it. Most of the security should be fixed with GRANT command.

Regarding your third question, it is a bit off-topic, but to pay a
look at mod_mysql_auth.

Regards,

Sinisa

+----------------------------------------------------------------------+
| TcX ____ __ _____ _____ ___ == mysql <email protected> |
| /*/\*\/\*\ /*/ \*\ /*/ \*\ |*| Sinisa Milivojevic |
| /*/ /*/ /*/ \*\_ |*| |*||*| mailto:sinisa <email protected>|
| /*/ /*/ /*/\*\/*/ \*\|*| |*||*| Larnaka, Cyprus |
| /*/ /*/ /*/\*\_/*/ \*\_/*/ |*|____ |
| ^^^^^^^^^^^^/*/^^^^^^^^^^^\*\^^^^^^^^^^^ |
| /*/ \*\ Developers Team |
+----------------------------------------------------------------------+

-
PHP3 Base Library Mailing List. Send messages to <phplib <email protected>>.
To unsubscribe, send "unsubscribe" to <phplib-request <email protected>> in
the body, not the subject, of your message.