[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ale] Please Help



Well, there is a function called chmod() that will do anything a UNIX
chmod will do. See shell_exec() and system() functions for executing
other shell functions within PHP.


On Thu, 2002-03-28 at 15:36, Tyler Kiley wrote:
> if php is compiled as an apache module, you're outta luck afaik..... there's 
> nothing to chmod +s, and suexec doesn't work on mod_php (? never tried 
> myself, but that's what I've heard).
> 
> if you've compiled it as a standalone executable, you can always chmod +s 
> /usr/local/bin/php, but then all your scripts run as that uid, which is 
> typically not good. (anyone know if apache will even accept an interpreter 
> that has the +s bit?)
> 
> Suexec with standalone php is probably the best option.  That will allow you 
> to designate a certain directory or virtualhost as setuid, while leaving all 
> other php scripts alone.
> 
> http://httpd.apache.org/docs/suexec.html
> http://www.php.net/manual/en/security.cgi-bin.php
> 
> Tyler
> 
> Ken Nagorski:
> > Please tell me someone knows how to do this. Here is the problem.
> >
> > I need to a script SUID form a website. It is a PHP script that calls a
> > wrapper program written in C and it is set 4755, The script is calls just
> > runs a system command, actually a courier command, the makealises command.
> > But I can't get this to work for the life of me. I know that someone has
> > had of written the script that simplifies system mamagment and then needed
> > to run a system command when it is finished but HOW?
> >
> > Uhg - Thanks
> > Ken
> >
> >
> >
> >
> > ---
> > This message has been sent through the ALE general discussion list.
> > See http://www.ale.org/mailing-lists.shtml for more info. Problems should
> > be sent to listmaster at ale dot org.
> 
> ---
> This message has been sent through the ALE general discussion list.
> See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
> sent to listmaster at ale dot org.
> 



---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.