Make directory and create files in a different domain

myitanalyst

Ok,

Have a client with domains and subdomains

They have a script that process a form under www.mydomain1.com, but need it to create a directory and file under the sub.mydomain1.com. These domains are under the same account, and the domain folders exist just like the domain name is setup.

I am trying the following from the www.domain.com form:

if (!file_exists('/sub.mydomain.com/newfolder'])) {
	mkdir('/sub.mydomain.com/newfolder');
}

but I get the error: "mkdir(/sub.mydomain.com/newfolder): No such file or directory in"

So, is this error due to permissions or do I have to use something else to get to a different folder outside the form domain? Can this be done?

Thanks

bradgrafelman

Er, I highly doubt the path is '/sub.mdomain.com/' ... it's probably more like '/home/username/sub.mydomain.com/public_html/newfolder/' etc.

Are you positive you have the correct path?

And yes, in the parent directory of all of the domains, the webserver has to have write access. If the webserver is in the same group as you, 775 will probably accomplish this. If not, you'll probably have to open it all the way up to 777.

myitanalyst

That gave me the kick I need. I knew there had to be a path like that somewhere. The one I used above was just an example... not the real domains, but they would have been wrong anyway. First time I have ever really written a file or directory with php.

Ok... I had to put 0777 rights on the sub.mydomain1.com folder.

Am I causing a security whole by doing this? It is the only way I could get it to work.

Thanks

bradgrafelman

Yes, 0777 means "let everyone do everything."

So, if other clients have shell access (or write PHP scripts to do it) and know you've done this, they could delete your site.

This is more than likely a violation of the host's TOS and you could get them nailed to the wall for doing it, but... shrug

myitanalyst

So how the heck do I write files within the context of my own website without it being a major security risk?

Also... if you noticed the mkdir command I used 0777 for the mode, but it ended up being 755 when I look at it with my ftp client using the primary ftp account that should have full access to everything.

When I wrote the file as well I didn't see any parameters to set the mode, but it ended up being 715. I now can't change the mode from my ftp client so I cannot delete it now.

I'm also going to need the ability to overwrite these XML files as they will be updated peridically.

Thoughts?

I guess it is learning time for files and rights under the php web world. 🙂

Thanks.

myitanalyst

Ok... using the built in file manager I am able to see that all files created via dreamweaver using my ftp account has the ftp username as the owner and group. But the ones I created with the script has the owner and group as httpd.

Ok... so how do I ensure the script can create, delete, and modify files, but not create a security risk AND not prevent my main ftp username full access.

Thanks again.