PHP/Apache Security Question

jnuneznyc

I am about to give my brother a virtual server space on my co-located Apache Web Server. How can I make sure that he can't access my files via php scripts or CGI-BIN cgi's

Currently my php pages are able to retrieve any files that apache has access to

keith73

Do you want to disable scripting all-together for the Virtual Host or just not allow access to files outside the VH's assigned directories?

keith

jnuneznyc

Not allowed access to any directories outside of the VH directory.

Another Apache question... I have my site as the main site will I need to convert that over to a VH?

Thanks for your help,
JNUNEZ

keith73

Originally posted by jnuneznyc
Not allowed access to any directories outside of the VH directory.

That one's a little beyond me right now.
I did find this information from apache and unixtools.org

http://httpd.apache.org/docs/misc/security_tips.html
http://cgiwrap.unixtools.org/

Another Apache question... I have my site as the main site will I need to convert that over to a VH?

Thanks for your help,
JNUNEZ

Is this site hosted somewhere or are you running the server yourself?
Typical setup includes one main domain name and all other domains are virtual hosts. You won't have to alter your main site, just add a Virtual host for your brother's site. IF you are using a hosting company, they can do this for you (for a fee of course). If doing it yourself, consult the documentation, your answer is in there.

keith

jnuneznyc

Thanks a lot keith73! I will read the article. My site is the main site so I will just and my brother's as a VH. I don't have a hosting company to manage my server. It's a co-location where I provided/manage the hardware and they provide the connection and backup PS.

dalecosp

You don't trust your own brother?

🙂

dalecosp

Seriously, I run all domains on my box as VirtHosts. I may not have something configged correctly, but pulling up my domain name without having the main site as a VH generally pulls up one of the other VH's....I think's they're the first in the list.....

LonelyPixel

ehm, did you find a solution for your problem yet?
i have also checked the both URLs given here, but i couldn't find relevant information concerning PHP scripts :-(
i'm looking to solve this for some time now and just can't find any way to do this!