: Security issues with PHP with cPanel and shared hosting if this is not the correct forum for this question please tell me! When one has an account on a shared server host running cPanel, the
if this is not the correct forum for this question please tell me!
When one has an account on a shared server host running cPanel, the account runs in a jailed environment where access to files is restricted to /home/myaccount/ and its subdirectories. However PHP runs as root, so is there any security issue possible where another (malicious) account-user could craft php scripts in such a manner as to access files in another users file area. I have heard conflicting stories about this and would like a definitive answer from a "server guru".
More posts by @Steve110
1 Comments
Sorted by latest first Latest Oldest Best
PHP doesn't always run as root (and generally shouldn't). Many servers will use suPHP, "a tool for executing PHP scripts with the permissions of their owners". There's also PHP-FPM which allows you to "start workers with different uid/gid/chroot/environment and different php.ini".
Each hosting provider may use a different setup, so if you're concerned what they're using, just ask them. If they don't give you the answer you want, move along to the next host.
Terms of Use Create Support ticket Your support tickets Stock Market News! © vmapp.org2024 All Rights reserved.