PHP Security

[tomas]

Hi!

I do not currently have a FQ account, but I'm very interested. What I would like to know first though, is if they/you provide any form of wrapping of php scripts (e.g. php-cgiwrap). As far as I understand, without this I would have to trust all other users on the server (if all scripts are run as the webserver user).

Thanks,
tomas

[Terra]

PHP comes in 2 flavors:

1) Apache PHP Module
*is protected by a highly tuned safe_mode configuration that meshes into our Domain_LockDown setup...[nbsp][nbsp]IOW, there is no access to someone elses domain unless they give you the key...

2) PHP CGI
*If you do run this via the web, then SUEXEC will automatically shift the process to your userid...[nbsp][nbsp]From command-line, it will assume your userid by virtue...

In conclusion, we have gone to great lengths to make sure our xdom directory structure can meet the expectations of the most demanding webmasters...

--
Terra
--Trying so hard to not sound like a sales pitch, but rather display the merits--
FutureQuest