Setting owner when uploading files

[Anon]

Hi,

I'm currently programming an uploading script in PHP for easier administration on my part. The script works fine, but the problem I'm having is that the files created have the apache owner:group "apache" on my particular server. This is causing problems because I cannot delete or move the files as I'm of a different user/group and am not a superuser. I've tried using PHP to CHOWN the files back but I keep getting an "Operation not permitted" error. I think this is because you need to be a superuser to CHOWN files.

Is there any way of uploading a file such that it is created on the server with a particular user:group?

Any other advice or suggestions would be much appreciated.

Thanks in advance,

Leonard

[[deleted]]

Is a CHMOD 0777 not enough to give you move/delete rights?

If you are friendly with your sysadmin, or you are the sysadmin, you could make a crontab entry that runs every X minutes and chmod's all files in a certain directory to your user and group.

Then there is allways the nasty way....

!!Note, the following is something that no sane system administrator would ever let you do!!

Have a look at a program called "sudo"
this lets you define a number of root commands to become available to a number of users.
These commands will be executed as root.

You could make "chown" available to apache and with a little wrapped you could make it so that apache can only chown files in a certain dir to your name and group.

[Anon]

I think the better option would be to run apache under SU_EXEC mode, which su - apache to the account of the user of the directory it is running in. Combine this with virtual hosts, and everyone's address on the box looks like this:

webserver.com/~yournamehere

And everything uploaded by PHP should belong to that user.

[Anon]

I am currently doing much the same thing. What I found out is that I could create a script to download a file to the same server as the files that I am uploading. This script uses ftp_get. The way this works is that it copies a file from a remote server into the same server as itself, but the copied file is owned by the web server. If you can ftp an administration file to the remote server, and download it to the same server as the files you are uploading, then the administration file can chown or otherwise manipulate the files you have uploaded into a usable form.

I hope this helps. If you are uploading, perhaps you can help me figure out why the enctype="multipart/form-data" is causing my file name variable to come out incripted instead of readable.