Justtechjobs.com Find a programming school near you






Online Campus Both


php3-list | 199901

[PHP3] 2nd Apache Server Security Implications From: jwb19 <email protected>
Date: 01/17/99

Background:

        I run a Linux server that will eventually house multiple PHP users
and websites. I am worried about security, though not in the traditional
sense. The nature of this project dictates that security between users
*other than me* is not an issue (i.e. they may read / include eachother's
files if they want); I just want to make sure that other users do not include
*my* PHP content (for db passwords, etc.). Assume that the machine is
otherwise well administered (always a shakey assumption with UNIX...).

Problem:

        How can I effectively set up two security realms? I would much
prefer to use the module version of PHP, not a CGI binary, for speed reasons.
Assuming that the file permissions on my content are only set to r/w for
Apache's user/group (and other files on the system have reaonable
permissions), what are the security implications of running a second Apache
webserver with PHP on my machine under a different user/group than the
first?? What am I forgetting / missing?

        Thanks in advance (and don't hesitate to ask me for more details
privately, I am well aware of the strange nature of my problem :) )

        James 

--
PHP 3 Mailing List   http://www.php.net/
To unsubscribe send an empty message to php3-unsubscribe <email protected>
To subscribe to the digest list:  php3-digest-subscribe <email protected>
For help: php3-help <email protected>  Archive:  http://www.php.net/mailsearch.php3
List administrator:  zeev-list-admin <email protected>