PHP MKDIR OWNED Apache User / Group
Feb 17, 2015When a php framework try to create a new folder, it's created with apache: apache owner instead the user and group owned the root folder.
the PHP safe_mode is set to off.
When a php framework try to create a new folder, it's created with apache: apache owner instead the user and group owned the root folder.
the PHP safe_mode is set to off.
I have opensuse 13.1 on my server and i folow this tutorial: URL....but as you see this is for opensuse 12.2, but i manage to run everythink only apache2 server.Well i get this error, but i run vhost.No user or group set - set suPHP_UserGroup..Well apache2 is rurning as every other thinks on server only web page dont show and i get error: Server error!
The server encountered an internal error and was unable to complete your request. Either the server is overloaded or there was an error in a CGI script.
APache is running under the "nobody" user/group as default in CPanel servers
as a suggestion I should change it to another user/group to improve security!
But in CPanel servers its hard to do that because you must edit some scripts and files to prevent the backing to nobody when running some scripts such
PHP Code:
/scripts/chownpublichtmls/scripts/enablefileprotect
or when create a new account
Some sites says "the secret of changing the user/group is in the UID/GID of nobody < 100 !"
so I found a solution :
1 - delete the user/goup nobody
2 - recreate it with GID/UID > 30000
3 - run /scripts/chownpublichtmls
so the question is that solution improve security or i should change the user/group to another one! like "www"?
We have several sites on one server. When I use the plesk wordpress manager it some how updates the User and Group permissions on folders and files with the username apache. How or what command do I run to get it to use the site username and psacln. It appears something maybe in an update or whatever has caused this issue. This only occurs with wordpress and drupal updates from the plesk interface.
What command can I run just to update the permissions to update all users to a username and psacln security settings on folders and directories.Running Plesk 12.0.18 and CentOS7
I have a question regarding running Mediawiki on my server and the user/group "nobody", which seems to be causing problems as far as file permissions go.
When a file is uploaded via mediawiki, it's assigned the group/user of "nobody"
This means I can't change the file's permissions via ftp or ssh, unless I login as root and chmod/chown the file back to the proper user.
I'm making an account for my friend, and I just want him to have access to /var/www/hishomedirectory/
I want him to be able to do anything in that directory (rename files, delete, copy, move, upload, etc..), but not able to use apt-get or play with settings. Not a superuser either.
After some yum updates last night one user and group called xfs were created on my dedicated server. Does anyone know what this group/user is used for?
View 0 Replies View RelatedI've finally made the leap to upgrading from shared hosting to a VPS. I'm still setting up my configuration before I point the domain name to my new server, but for now, I have the site mirrored and I'm ensuring that all is running well. For the most part, everything is working, but I am running into a few permission issues...
As of right now, all the files in my htdocs directory are owned by root, and I am logging into my FTP client as root. However, I'm pretty sure that this is not how I should be doing this, because I need to allow write permissions to some folders from my php scripts.
I was just curious, how do you you guys set up the users and groups on your linux servers (running apache). I'm just not certain of the best way to handle it. Should I make a new FTP user, and if so, what group should it go in? Should that user be the owner of all the web files? When is it safe to set folder permissions to 777?
LXadmin seem to have a preset disk quota limit to users/groups, even root!
So, how do I change these disk quota limits? There isn't an option in the LXadmin control panel either.
We have a weird issue on one of our centos 5 servers, running the 2.6.18-53.1.4.el5 kernel
for some reason we cant mkdir any directories that are numerically named
ie mkdir 5789 doesnt work
alpha and alpha numeric work fine... ie mkdir ab567a
Quote:
[root@]# mkdir 6
mkdir: cannot create directory `6': No such file or directory
[root@]# mkdir 6ab
[root@]#
Someone suggested the adore-ng rootkit was to blame but we have run ossec root check, rkhunter and chkrootkit and even run clamav over the drives and cant find anything nasty
downloading mailparse-2.1.4.tgz ...
Starting to download mailparse-2.1.4.tgz (36,862 bytes)
..........done: 36,862 bytes
9 source files, building
running: phpize
Configuring for:
PHP Api Version: 20041225
Zend Module Api No: 20060613
Zend Extension Api No: 220060519
building in /var/tmp/pear-build-root/mailparse-2.1.4
Warning: mkdir(): No such file or directory in System.php on line 273
Warning: mkdir(): No such file or directory in /usr/local/lib/php/System.php on line 273
ERROR: could not create build dir: /var/tmp/pear-build-root/mailparse-2.1.4
Thats what happens when I try to install an extension.
There is a domain name in my WHM that does not seem to be owned by anyone, it just gives the username for the domain like below, but does not show who the domain is owned by (ie: root).
Code:
Example: ukstuden()
How can I fix this?
i have a tembak which is compiled from tembak.c and takes up processes. i have deleted the files from the server however it pops backup again in the same directory.
View 4 Replies View Relatedthis webhost is your classic insecure VPS here is an chat transcript I sent the tech support
----------
%nslookup 83.138.144.36
Server: 192.168.1.254
Address: 192.168.1.254#53
Non-authoritative answer:
36.144.138.83.in-addr.arpa name = stresa.hostireland.c0m.
Authoritative answers can be found from:
------------
from email from 83.244.130.107 and to website 83.138.144.36/~rhyno
ictom: eqwrt
You are now speaking with Mitch of Support.
Mitch: Hello, thanks for contacting support how can i
help you
victom: hello
victom: I just called a while ago about phishing site
victom:
____://83.138.144.36/~rhyno/rams/sitekey.bankofamerica.com/sas/signon.do&detect=2/
Mitch: Yes, I belive you were speaking to Anthony
victom: heh ya I ran out of min on my account
Mitch: ok, What i would ask you to do is place a
trouble ticket via PAM and i will forward this to our
senior technicians and admin team for further review
victom: firefox picked it up as a phishing website but
IE6
is not so lucky
Mitch: More then likley due to the outdated security fetures in IE6 it is becoming easy to get around it
victom: that and your running some exploitable services on that VPS prob. I use to work for a webhost
victom: trouble ticket via PAM?
Mitch: Are you currently a Host ireland customer?
victom: Hell no I got a spam email from umm hold
victom: 83.244.130.107
Mitch: Ok, So we can track this issue could you please send us an e-mail to support@hostireland.ie
victom: so looks like you got at least 2 owned boxes
victom: sure
there is anyone out there who has their infrastructure colocated in cogent owned datacenter. And how stable and secure is it. The only reason i m interested in Cogent owned colo is that they provide solid SLA.
View 14 Replies View RelatedI used to have my apache 1.3.37 with PHP compiled as a CGI. Whenever i have a php script (say vbulletin forum software) that allow file uploads, files will be uploaded with the correct userid and groupid on the server. However, once i compiled PHP as ISAPI module, the files will be uploaded but will be owned by 'nobody'. Of course i can log in as root and chown it back to the right user, but it's a hassle if there are multiple user accounts on the server and they're using php software on their end. If someone is using an ftp program and tries to overwrite that uploaded file that's owned by nobody, it will not let them do so. Is there a way to fix this, or change the config files that would fix it?
View 3 Replies View RelatedI'm looking both at powweb website and dot5hosting and the products page look exactly the same with different colors. Are they owned by different owners, or do do their pages just look the same?
Here are the links ....
Just wanted to know if anyone know of a black owned dedicated web hosting company?
View 11 Replies View RelatedI've run into a wall trying to run apache with multiple websites allowing users to use FTPd to manage files.
I'm running FreeBSD 7.1 on Apache 2.2.x
The issue is that Apache runs as www:www but FTPd writes the files as username:client. When performing some scripts that edit back-end files, this obviously can cause errors.
The data for each directory is stored in /home/username/www
I looked into some apache directives I could use. I tried putting User and Group directives into the vhost configuration for each vhost, but that did not work. I even found the perchild module and it looked like it can do the job but was a bit scared and turned off by the fact that it states it is beta at the top of the page. (I cannot link to it because I do not have enough posts.)
I'd appreciate if you can point out some links, or if anyone is willing to help me for a fee, we can talk about it.
I have a web application called MyApp
- Each MyApp user has 5gb hosting, and a web interface to manage their files.
- Therefore MyApp user gets a user account on linux machine and has access to only one directory /repo/usr/<user_id> and nowhere else. (suexec?)
- If that MyApp user creates a subdomain from any folder inside his home folder (he can do that using web interface), that folder is readable by www-data user not writable.
- That myapp user is able to mount/unmount his own ftp drives using curlftpfs.
- In short, users can only mess with their own files and they have no access nor rights to any other file that is outside of their home dir.
In short, this is a kind of hosting company server setup. Right now, we will have to manage all this from -only- one powerful server.
I've recently moved to a new server in which I don't have root, so bare with me.
For some reason when I upload a file with 'move_uploaded_file($tmpName,$new_filename)', it seems to work fine - but when I check it, try to download it (http or ftp), or change the permission - I can't, because its set to 600 for some odd reason, and owned by the user Apache is setup on.
My apache VPS is having a minor problem.
Using SSH, I gave permission to my FTP username with code below:
chown -R user:ftpgroup /home/site
But my WP theme needs to set up that user I use is rewritable and use this code:
chown -R www-data:www-data /home/site
since using a php code to check WP user and it shows www-data.
MY PROBLEM: I need my FTP to able to write cause i use plugin to create backup and change plugin. My theme also need for both to work.
I can't seem to make run together. I can change group or FTP as long as I can have m WP working.
I am using apache with subversion and need to redirect a request for a file to a different file based on the user that has made the request. It appears that the URL for the requested file could be changed on the fly using RewriteMap; however, is there any way to get the User (as typically given in the request_rec available to apache hooks) making the request in the program used?
View 2 Replies View Relatedhave built quite a library of music now. It would be great if I could upload music to my hosting account, and then just access it from my phone. Would that be allowed so long as I did not share this music with others? Where might I be able to set this up? I checked with hostgator and they said it was not okay.
View 9 Replies View RelatedI wanted to list down all files owned by 'root' inside /home directory and all users directory inside /home/users including subfolders and everything!
the command below works but only works when executed within the working directory.
ls -l | awk '{print $3" " $9}' | grep root
i have 2 questions
1 ) iwant limit one user on the cpanel limit on the apache conections?
2 ) i want limit one user not use download manager for site clients