Gossamer Forum
(Advanced Search)
for
Home : General : Internet Technologies :

PHP Superuser

Jul 16, 2003, 7:51 AM
Lee
User (154 posts)
Jul 16, 2003, 7:51 AM
Post #1 of 6
Views: 918
Shortcut
Quote Reply
PHP Superuser
I am trying to write a script that will create a fill and then change the ownership to someone else. However, I keep getting an error (using the chown function) and I am guessing it is because PHP is not running as a superuser. Does anyone know how to set PHP to run as a superuser? Or any other suggestions which may get this working? Thanks for the help!
Jul 16, 2003, 9:24 AM
Andy
Veteran / Moderator (17364 posts)
Andy's avatar
Jul 16, 2003, 9:24 AM
Post #2 of 6
Views: 899
Shortcut
Quote Reply
Re: [Lee] PHP Superuser In reply to
Is that a good idea? It would open up a *huge* security risk in your server :-/

Cheers

Andy (mod)
andy@ultranerds.co.uk

IMPORTANT: I've now moved to ultranerds.co.uk, and the .com will no longer work!
Want to give me something back for my help? Please see my Amazon Wish List
GLinks ULTRA Package (plugins total "value" $3,325 & rising, for just $350)| GLinks ULTRA Package PRO (plugins total "value" $5,625 & rising, for just $500)
Support Forum | Links SQL Plugins | DMOZ Dumps | UltraNerds | ULTRAGLobals Plugin | Pre-Made Template Sets | FREE GLinks Plugins!
Compare our different Plugin packages *new* Free CSS Templates
Jul 16, 2003, 1:53 PM
hennagaijin
User (425 posts)
Jul 16, 2003, 1:53 PM
Post #3 of 6
Views: 887
Shortcut
Quote Reply
Re: [Lee] PHP Superuser In reply to
What error message are you getting? Can you post your code, please?
Fractured Atlas :: Liberate the Artist
Services: Healthcare, Fiscal Sponsorship, Marketing, Education, The Emerging Artists Fund
Jul 16, 2003, 2:06 PM
Andy
Veteran / Moderator (17364 posts)
Andy's avatar
Jul 16, 2003, 2:06 PM
Post #4 of 6
Views: 885
Shortcut
Quote Reply
Re: [hennagaijin] PHP Superuser In reply to
I wasn't even aware that you could CHOWN a file with PHP. mkdir(), chmod(), rmdir(), and other's, but not chown() Unimpressed

Cheers

Andy (mod)
andy@ultranerds.co.uk

IMPORTANT: I've now moved to ultranerds.co.uk, and the .com will no longer work!
Want to give me something back for my help? Please see my Amazon Wish List
GLinks ULTRA Package (plugins total "value" $3,325 & rising, for just $350)| GLinks ULTRA Package PRO (plugins total "value" $5,625 & rising, for just $500)
Support Forum | Links SQL Plugins | DMOZ Dumps | UltraNerds | ULTRAGLobals Plugin | Pre-Made Template Sets | FREE GLinks Plugins!
Compare our different Plugin packages *new* Free CSS Templates
Jul 16, 2003, 2:10 PM
hennagaijin
User (425 posts)
Jul 16, 2003, 2:10 PM
Post #5 of 6
Views: 888
Shortcut
Quote Reply
Re: [Andy] PHP Superuser In reply to
Yep - http://www.php.net/chown

But PHP does have to run with superuser permissions, which, I agree, creates some security concerns.
Fractured Atlas :: Liberate the Artist
Services: Healthcare, Fiscal Sponsorship, Marketing, Education, The Emerging Artists Fund
Jul 17, 2003, 9:12 AM
Alex
Administrator (9387 posts)
Jul 17, 2003, 9:12 AM
Post #6 of 6
Views: 864
Shortcut
Quote Reply
Re: [Lee] PHP Superuser In reply to
Hi,

You would need to either:

a. Run apache as root (very bad idea and apache won't let you do this unless you recompile it with a special flag).

b. Run your PHP via CGI that is setuid root. Could be a big exploit waiting to happen if you don't lock it down properly.

Cheers,

Alex
--
Gossamer Threads Inc.