writing files in PHP

Anon

Okay I've been working on this forever, so If anybody has an answer, or even a clue of where to start, PLEASE let me know!!!

I need a way to write a file to disk from PHP when PHP is running as nobody.

If there is any way in C, java, or perl, or bash to set the userid of the program by providing a username and password, please let me know....cause then I could write a program to evoke through system() to do it.

If anybody knows of some way you can use chmod +s or something to make a bash script executable by all run as the owner of the script when anybody hits it, please let me know...

If anybody knows or has a clue of ANY WAY to write files by providing a username and password OTHER than using freaking ftp functions to ftp myself and write the files, PLEASE LET ME KNOW!!!

brandonschnell

if you're on linux/unix running apache then run php as a cgi and use suexec.

Anon

why don't you just make world-writable directory for that?

Anon

Mostly for security reasons...example: A (business) client is being hosted on a shared server owned by a small hosting company. They have some sensitive data that they don't want anybody to mess with that is uploaded through a web interface, or data that they only want certain logged in users to see. Its not exceptable to make the data world writable or even world readable, because it makes it to easy for malicious parties to read or alter data simply by buying an account at the hosting service.

Anon

Thanks so much for your reply. I have never heard of suEXEC, but I have read up on it now and have a renewed faith that there is indeed sanity in the world...It seems like common sense for shared hosting environments to have scripts run as the user who writes them...It offers security to the users, and makes it easier to weed out the people who are writing scripts that are causing the server harm.

Unfortunately, none of the hosting services I use apply it. But now at least I have something to ask for!

Brandon Schnell wrote:

if you're on linux/unix running apache then run php as a cgi and use suexec.