LinuxSA Mailing list archives

  From: Andrew Hill <list@fornax.net>
  To  : Tarek Heiland <tarek@bakas.com.au>
  Date: Wed, 03 Jan 2001 09:01:15 +1030

Re: Apache + PHP4

Tarek Heiland wrote:
> As to userdir's - compile apache with suexec - this allows you to run
> scripts/pages as other users instead of your public web user. This can help
> having to bastardise permissions to have things work. Note that there are
> very stringent permission requirements that MUST be met before suexec will
> work. (Note however if you ever have to run scripts that require uid's <
> suexec cutoff you will need to then utilise sudo to break this limitation,
> although you can seriously compromise security doing this).

Similarly, CGIWrap is cool for doing this
(http://cgiwrap.unixtools.org/).

You can even use Apache's mod_rewrite to make the use of CGIWrap
transparent to users:

RewriteEngine On
RewriteRule ^([a-z-][-0-9]+)\.domain\.com/cgi/(.*)
/cgi-bin/cgiwrap/$1/$2 [PT]
RewriteRule ^([a-z-][-0-9]+)\.domain\.com/cgi-d/(.*)
/cgi-bin/cgiwrapd/$1/$2 [PT] 
RewriteRule ^([a-z-][-0-9]+)\.domain\.com/nph-cgi/(.*)
/cgi-bin/nph-cgiwrap/$1/$2 [PT]
RewriteRule ^([a-z-][-0-9]+)\.domain\.com/nph-cgi-d/(.*)
/cgi-bin/nph-cgiwrapd/$1/$2 [PT]

(Yes, it's the first thing in the CGIWrap "Tips and Tricks", but it's
cool :-)

Cheers,
-- 
Andrew Hill

"Right now, I'd happily snort gunk from the sink if it would take
my brain somewhere away from here...." - JB

-- 
LinuxSA WWW: http://www.linuxsa.org.au/  IRC: #linuxsa on irc.linux.org.au
To unsubscribe from the LinuxSA list:
  mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject