Apache as owner of httpdocs

Is this a really bad idea? With safe_mode on and safe_mode_gid off I can’t get around having php scripts being able to write with fopen (with SElinux[fedora core])) …

Been thinking about it and I’m sure it’s not great, but I can’t think of why it would be catastrophical either…

thoughts?

More of a FYI than anything else but I had this itching at the back of my neck giving the web daemon ownership of my wwwroot so I re-wrote all the scripts to point to a secondary directory (wwwroot/something) and gave apache ownership of that folder instead… so if someone hacks it, it ain’t the end of the world :wink:

What are you talking about?

I’m giving a php script the rights to write a .xls and .xml file to the server. Where did you get read source of php from :slight_smile:

I’m sorry but I guess you’re not reading my post… my question was if giving Apache ownership of wwwroot is a bad idea.