Joomla! Discussion Forums



It is currently Mon Nov 23, 2009 6:50 pm (All times are UTC )

 


Forum rules

Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Security Checklist
Forum Post Assistant - If you are serious about wanting help, you will use this tool to help you post.



Post new topic Reply to topic  [ 7 posts ] 
Author Message
Posted: Sun Sep 18, 2005 10:09 pm 
User avatar
Joomla! Apprentice
Joomla! Apprentice
Offline

Joined: Fri Sep 02, 2005 11:40 am
Posts: 11
Location: Denmark
When mambo/joomla creates or edits files and folders it changes ownership of the files to its own. That way I cant delete/change any of those files and folders when i use ftp programs unless i set permissions to 777 which I dont like at all.

Is there any way i can change ownership so ftp programs can do their thing?

thanks in advance.

_________________
SV Consult
- Webprogrammør


Last edited by sviftrup on Mon Sep 19, 2005 8:10 am, edited 1 time in total.

Top
  E-mail  
 
Posted: Tue Sep 20, 2005 12:49 am 
User avatar
Joomla! Intern
Joomla! Intern
Offline

Joined: Wed Aug 17, 2005 10:11 pm
Posts: 85
So far there's no resolution to this problem in Mambo, you'll have to ask you host to change the files ownership to your username or run phpsuexec/suexec for apache to create files and folders as user not as apache user.

Actually this should be added to the wishlist as a new feature similar to File/Directory Permissions in global configuration.

_________________
Michael Morris - BuyHTTP Internet Services
www.demoplaza.com : Flash Tutorials For Joomla
www.buyhttp.com : Joomla Hosting Specialists
Free Joomla Professional Installation + Free Joomla Template


Top
   
 
Posted: Tue Sep 20, 2005 9:42 am 
User avatar
Joomla! Hero
Joomla! Hero
Offline

Joined: Fri Aug 19, 2005 2:23 pm
Posts: 2158
Location: The Netherlands
keep in mind that suexec will have large impact on the performance of your server. Especially with large sites, this will cause problems.

_________________
Adam van Dongen - Developer

- Blocklist, ODT Indexer, EasyFAQ, Easy Guestbook, Easy Gallery, YaNC & Redirect -
http://www.joomla-addons.org - http://www.bandhosting.nl


Top
  E-mail  
 
Posted: Tue Sep 20, 2005 5:16 pm 
User avatar
Joomla! Intern
Joomla! Intern
Offline

Joined: Wed Aug 17, 2005 10:11 pm
Posts: 85
phpsuexec/suexec are installed on the server hosting mambohut.com and I haven’t noticed any related performance issues

_________________
Michael Morris - BuyHTTP Internet Services
www.demoplaza.com : Flash Tutorials For Joomla
www.buyhttp.com : Joomla Hosting Specialists
Free Joomla Professional Installation + Free Joomla Template


Top
   
 
Posted: Thu Sep 29, 2005 5:02 pm 
User avatar
Joomla! Intern
Joomla! Intern
Offline

Joined: Mon Aug 29, 2005 4:25 pm
Posts: 54
mambohut wrote:
So far there's no resolution to this problem in Mambo, you'll have to ask you host to change the files ownership to your username or run phpsuexec/suexec for apache to create files and folders as user not as apache user.

Actually this should be added to the wishlist as a new feature similar to File/Directory Permissions in global configuration.


Ha!  Actually submitted this today as a feature request before reading this post.  :)

_________________
Bulldog


Top
  E-mail  
 
Posted: Mon Oct 03, 2005 12:23 am 
User avatar
Joomla! Enthusiast
Joomla! Enthusiast
Offline

Joined: Sun Aug 21, 2005 11:41 pm
Posts: 131
Location: UK
mambohut wrote:
phpsuexec/suexec are installed on the server hosting mambohut.com and I haven’t noticed any related performance issues


As a general rule, running PHP as an Apache module will be faster as the runtime is loaded into memory. However, if you're doing a lot of cgi-based access the phpsuexec may stay loaded in memory anyway, but does use extra resources to run as a cgi module.

The other difference is with webserver permissions. Having PHP as a cgi (phpsuexec) will run under the user's own account. Yes, this means users can more easily manage files as they are 'owned' by them, but it also does carry a risk that websites/personal files are more 'open to exploitation' than under a normal mod_php setup, since the php cgi application has read/write privilages instead of just read-only privileges.

- Vince

_________________
www.hostbaron.com - low price Joomla starter packages.

www.MySQLbackup.info - Automated MySQL Backup script.


Top
  E-mail  
 
Posted: Sat Nov 14, 2009 7:50 am 
User avatar
Joomla! Enthusiast
Joomla! Enthusiast
Offline

Joined: Sat Nov 15, 2008 5:24 am
Posts: 127
Vince wrote:
mambohut wrote:
phpsuexec/suexec are installed on the server hosting mambohut.com and I haven’t noticed any related performance issues


As a general rule, running PHP as an Apache module will be faster as the runtime is loaded into memory. However, if you're doing a lot of cgi-based access the phpsuexec may stay loaded in memory anyway, but does use extra resources to run as a cgi module.

The other difference is with webserver permissions. Having PHP as a cgi (phpsuexec) will run under the user's own account. Yes, this means users can more easily manage files as they are 'owned' by them, but it also does carry a risk that websites/personal files are more 'open to exploitation' than under a normal mod_php setup, since the php cgi application has read/write privilages instead of just read-only privileges.

- Vince



actually, cgi is more secure because the Apache module forces you to chmod to 777 for many extensions.


Top
  E-mail  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 7 posts ] 

Quick reply

 



Who is online

Users browsing this forum: No registered users and 22 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group