Re: Database Security Issues

From: Daniel Tryba (news_comp.lang.php_at_canopus.nl)
Date: 11/26/03 

Date: Wed, 26 Nov 2003 00:45:54 +0000 (UTC)

Michael Fuhr <mfuhr@fuhr.org> wrote:
>> Needlesly complicated. Run the webserver with the priveliges of a
>> user. That way the passwds can be in a file only readable to the user
>
> Could you elaborate on how you'd do this on an ISP's web server
> that has thousands of users?

With apache it seem that suexec is the way to go (and thus introducing
new problems like running php as cgi, but the enhanced per user security
might be worth it).

> Apache 2's perchild MPM looks promising for virtual hosts -- if you
> want to have a virtual host for each user -- but according to the
> documentation it doesn't work yet on most platforms, and I wonder how
> it would scale. It also doesn't appear usable in a non-virtual-host
> setup, such as the ISP might have for its SSL configuration.

On the system I run Apache/PHP I'm the sole user, on the only multiuser
system I have access to the server isn't Apache, it lacks "native" php
support so php is run as the user in cgi :) 

-- 
  Daniel Tryba

Relevant Pages

  • Re: PHP + IIS + Visual Studio.NET 2005 and Apache
    ... The apache version that comes with VS.Php however will shut itself down ... Apache or IIS. ... to use the DBG module installed inside PHP inside the version of Apache ... bundled with VS.php in case you do not have any other web server installed. ...
    (alt.php)
  • apache php cgi install problem
    ... php is installed in c:/php ... descriptor: don't know how to spawn child process: ... in the Apache error log. ... I have no experience in CGI - I only know it stands for Common Gateway ...
    (comp.lang.php)
  • Re: apache php cgi install problem
    ... php is installed in c:/php ... descriptor: don't know how to spawn child process: ... in the Apache error log. ... I have no experience in CGI - I only know it stands for Common Gateway ...
    (comp.lang.php)
  • Re: PHP-Yes, HTML-No --- Why?
    ... Surely a dynamic web server should appear exactly the same as a static one - all files that contain HTML when viewed should be called ... If you know how, say, the PHP apache module works, you'll see that the hit is ... Apache was designed to do just this. ...
    (comp.lang.php)
  • Re: Displaying files
    ... to be in a directory php can access. ... On the web server I use, there are lots of locations available to the ... using Apache, you can use the Apache configuration file ... the permissions for that directory must give the ...
    (php.general)