Subject | Re: Installing PHP-Firebird |
---|---|
Author | vengfulsquirrel |
Post date | 2003-11-26T20:59:37Z |
--- In firebird-php@yahoogroups.com, Milan Babuskov <albis@e...> wrote:
to work since the apache process cannot get access to the db's, I
really have no idea how that is possible since it should ask the
firebird server for the info and the server is running a firebird and
the db's are all owned by firebird. What is your apache process
running as, is it sharing a group with the firebird user or something?
Thanks
-Ian
> vengfulsquirrel wrote:I figured running as firebird would be better but I cannot really get
> > oops Well, I mean if you have time, in the past(seeing as you are not
> > running one) what did you run the server as?
> > Thanks
> > -Ian
>
> I run them as both ;)
>
> If you run server as root user it can pose a security risk, since then
> the server process has all the rights as root user. Some misformed UDF
> function can make hell on your system (in theory). Also, using external
> files, a user can damage any file of your system, since root has rights
> for every file/directory.
>
> It's more secure to run server as "firebird" user.
>
> --
> Milan Babuskov
> http://fbexport.sourceforge.net
to work since the apache process cannot get access to the db's, I
really have no idea how that is possible since it should ask the
firebird server for the info and the server is running a firebird and
the db's are all owned by firebird. What is your apache process
running as, is it sharing a group with the firebird user or something?
Thanks
-Ian