Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




32 posts

Geek
+1 received by user: 2


Topic # 128726 21-Aug-2013 14:39
Send private message

Does anyone have a robust solution for the problem that on Plesk (and both the control panels I've used prior to Plesk), PHP runs as a user (generally apache) which is not part of a site's group. This generally leads to the requirement that any directory where the CMS needs to write files have permissions of 777 - not good for security.

So far I've found a $proprietary plesk add-on called run PHP as user. Seems like a good option but I only have a production server, so trying to install it would be high-risk.

Would making apache a member of the groups psacln or psaserv work? psaserv is the group for all sites above their httpdocs directory, psacln for all files and directories below httpdocs.

Create new topic
3347 posts

Uber Geek
+1 received by user: 359

Trusted

  Reply # 882207 21-Aug-2013 14:59
Send private message

I'm sure you can have them in the same group of if not have one as owner and then set the group e.g. 775?





10 posts

Wannabe Geek


  Reply # 885562 27-Aug-2013 21:14
Send private message

It's because your domain/site is set to run PHP as Apache module (using Apache user).
Go to Web Hosting Settings or Settings (depending on the version of your Plesk) and use FastCGI. With that, PHP will be executed by your account. Similar to cPanel's way using suPHP. 

Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Red Hat unveils production-ready open source hyperconverged infrastructure
Posted 23-Jun-2017 22:10


Whatever ailed Vodafone broadband … seems to be fixed
Posted 23-Jun-2017 14:10


VMware NSX Meets Stringent Government Security Standards with Common Criteria Certification
Posted 22-Jun-2017 19:05


Brother launches next-generation colour laser printers and all-in- ones for business
Posted 22-Jun-2017 18:56


Intel and IOC announce partnership
Posted 22-Jun-2017 18:50


Samsung Galaxy Tab S3: Best Android tablet
Posted 21-Jun-2017 12:05


Wellington-based company helping secure Microsoft browsers
Posted 20-Jun-2017 20:51


Endace delivers high performance with new 1/10/40 Gbps packet capture card
Posted 20-Jun-2017 20:50


You can now integrate SMX security into Microsoft Office 365, Google and other cloud email platforms
Posted 20-Jun-2017 20:47


Ravensdown launches new decision-making tool HawkEye
Posted 19-Jun-2017 15:38


Spark planning to take on direct management of all consumer stores
Posted 19-Jun-2017 10:03


Qrious acquires Ubiquity
Posted 14-Jun-2017 12:21


Spark New Zealand prepares for 5G with Nokia
Posted 14-Jun-2017 12:16


The future-proof 10.5-inch iPad Pro
Posted 13-Jun-2017 18:16


Mandatory data breach reporting in Australia
Posted 13-Jun-2017 11:30



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.