Re: write with cURL

Tim Greer wrote:
Ylva Poelman wrote:

The problem is that I do not want to change an existing file, but to
create a new one, write to it and saven it.

Then the directory you create the file is needs world read, write and
execute permissions. This is assuming that the PHP script runs as the
global web server user (and it surely does given the problem you have). So, create a directory and set it to chmod 1777 (or 0777 if you can't
add the sticky bit) and then have files created there (or wherever you
need, though it's a terribly bad idea to set the primary web root
directory itself to world writable).

World read/write is VERY BAD. It opens the website to all kinds of potential security risks from other users on the same server.

Rather, it should be user and group read/write, and ensure the web server itself is part of the group.

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@xxxxxxxxxxxxx
==================
.

Relevant Pages

  • Re: write with cURL
    ... as the global web server user and thus needs world write permissions ... Hence, any PHP script ran on another account, has the ... global or Apache group (it can still use Apache group to offer web root ...
    (alt.php)
  • Re: Suggestions on creating a File Download area
    ... filename will be able to download the file without paying you anything. ... as the web server wouldn't go out of the /var/www/html ... A php script can read a file outside the document-root, ... use fpassthru() function, of course you can use any of the other file read ...
    (alt.php)
  • Re: write with cURL
    ... This is assuming that the PHP script runs as ... the global web server user (and it surely does given the problem you ... the global web server user and thus needs world write permissions to ... and execute permissions. ...
    (alt.php)
  • Re: A password problem
    ... "Mark Wooding" wrote in message ... > matter for Eve to write a PHP script which runs any arbitrary program ... But if Eve *can't* get the password in clear text (i.e. the web ... If we get rid of the bugs we've identified with web server security, ...
    (sci.crypt)
  • Re: link DB record through browser...
    ... The web browser sends a request to the web server, ... runs the PHP script which sends a query ... http://mindprod.com Java custom programming, consulting and coaching. ...
    (comp.lang.java.databases)
Loading