Mobile app version of vmapp.org
Login or Join
Steve110

: Security issues with PHP with cPanel and shared hosting if this is not the correct forum for this question please tell me! When one has an account on a shared server host running cPanel, the

@Steve110

Posted in: #Cpanel #Php #Webserver

if this is not the correct forum for this question please tell me!

When one has an account on a shared server host running cPanel, the account runs in a jailed environment where access to files is restricted to /home/myaccount/ and its subdirectories. However PHP runs as root, so is there any security issue possible where another (malicious) account-user could craft php scripts in such a manner as to access files in another users file area. I have heard conflicting stories about this and would like a definitive answer from a "server guru".

10.01% popularity Vote Up Vote Down


Login to follow query

More posts by @Steve110

1 Comments

Sorted by latest first Latest Oldest Best

 

@Dunderdale272

PHP doesn't always run as root (and generally shouldn't). Many servers will use suPHP, "a tool for executing PHP scripts with the permissions of their owners". There's also PHP-FPM which allows you to "start workers with different uid/gid/chroot/environment and different php.ini".

Each hosting provider may use a different setup, so if you're concerned what they're using, just ask them. If they don't give you the answer you want, move along to the next host.

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme