Hi,
I run apache2 and php and have a site that has an upload function which is used to upload pictures.
The problem is, when the files are uploaded, the owner and group are both set to apache, how can I change this so that I can specify who the owner and group are as it causes problems with our current backup system
Thanks
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
TomDavidson's suggestion of suexec is the best solution but can be a little tricky. An ugly hack but something that will work quickly is to run a cron job as root every so often (say every hour, or whatever works best for you) that chown's the upload directory:
10 * * * * /bin/chown user:user /path/to/your/upload/direc
-Pat
i kinda like Pat'5star suggestion for some reason. chmod deal with filesystem permission. that way, let the os deal with it. clean. if (IMHO) done on apache, it would create another "items" to deal with.
Let apache do the web stuff, and os do the file-stuff. keep it simple!
BUT TomDavidson suggestion should work just fine -- with some effort!.
Or another approach is to fix your current backup system -- as it sounds rather odd to me.
why isnt using the chmod php function secure?
I am trying to use it but I am getting the following error:
Warning: chown(): Operation not permitted in /home/httpd/vhosts/sitenam
Warning: chgrp(): Operation not permitted in /home/httpd/vhosts/sitenam
vibale,
to be honest, I do not have much experience on php. however, my note is just based on my past experience that it is best to get a component to do what the job that it's best for. And specific to this case, I would believe that chmod stuff would be very straightforward to be done at OS level.
Did some ckecup on PHP forum --
http://www.phpbuilder.com/
And yes, it goes back to the fact that apache process is running under a user "Apache" (or "http"), and not root. In this case, it would not be possible to do the chown and chgrp to other user. I am not sure how if there is any facility in PHP that could be enabled to allow this. But one thing that you could try would be getting apache to run as root -- then the chown and chgrp in php should work. However, from my past experience, getting apache to run as root would be a living-nightmare. messy.
another option is suExec! http://httpd.apache.org/do
Looking at the complexity, I would still recommend the cron thing. Add the line to your root crontab and you are done. Don't worry about file locking, what happens if the user uploaded file after the cron runs (since you practically could run the cron every minute -- if you need to!).
hope this would help.
Business Accounts
Answer for Membership
by: TomDavidsonPosted on 2004-09-02 at 08:46:34ID: 11964784
The easiest (but not most secure way) would be to chmod the file after uploading it [http://www.php.net/chmod]
Alternatively you could use the suexec mechanism of su_php to have all your scripts running as the user and group that you specify.