RE: FN-FORUM PHP *nix file permissions

date posted 22nd January 2001 21:57

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

PHP scripts will run as the web server owner. This is usually nobody,
and seems to be the case for yourself.

Although I dont code in PHP why not try storing all the files that
have to be downloaded below the web root ? (as that's what I do in my
Perl scripts)
- --
Jason Duke || Tel +44(0)7050802831
Founder || Fax +44(0)7050802832
One Eye Group || Email [EMAIL REMOVED]

Looking Forward With Dedicated Vision


- -----Original Message-----
From: [EMAIL REMOVED]
[EMAIL REMOVED] Behalf Of Mark Williams
Sent: 22 January 2001 21:30
To: [EMAIL REMOVED]
Subject: FN-FORUM PHP *nix file permissions



Doh, I don't know if this email was actually sent to the list
earlier..
but I forgot that I was not yet subscribed under my new email, so I
haven't recieved anything. Anyway, here goes again.. If anyone
already
replied, could you resend your replies, perhaps off-list so that we
don't annoy too many people..

I have a set of downloadable files on a host that I wish to offer to
certain people for download. However, I want to protect these files
so
that only those users who are registered can download the files, and
also so that only administrators can upload files. I plan to do this
by
having a PHP script read in these files and then echo them through to
the user, only after first verifying that he is a legitimate user.

My problem is that, after protecting the directory in which the files
are stored, although the remote web browser will not have access to
it,
neither will any PHP script. It appears that the PHP scripts run as
'nobody', even if they are owned by the user who also owns the
protected

directory (the directory has all permissions turned on for the owner,
but off for other users).

I don't seem to be able to figure any way around this. I can't see
anything in the php.ini file that could change anything. Can anybody
help?

Mark

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use

iQA/AwUBOmysCJ9nP977T15sEQKhMQCgqTptJOsjtZMaKLG1rxEqMJ5SDt0AnRcE
GnMjKs1RQeRsl8tPSEdcYIPw
=xfEt
-----END PGP SIGNATURE-----