: Wordpress in Suexec or suphp I have a Hsphere 3.6S.0SPU installation (that I am begging management to get rid of, but anyways...) that has several customer WordPress installations in it. I have

I have a Hsphere 3.6S.0SPU installation (that I am begging management to get rid of, but anyways...) that has several customer WordPress installations in it.

I have discovered that the only consistant way to permit WordPress to upload stuff is to set the wp-content/upload tree as RWX for the httpd user. This, I know, is terrible because it means that any process running as the httpd user can now write to this directory.

I have discovered that I can't run WordPress under suexec because suexec only works with shell-out binaries, not plug-ins like PHP. I have also discovered that there is a plug-in called suPHP which should do what I want -- but I can't find it.

The shipped apache config file for hsphere does reference suphp, but only in a commented-out manner, and there are no other files in the hsphere tree that refer to it.

My questions:

A) is suphp the correct way for securely running WordPress in a multi-tenant environment? and
B) if so, where might I find it for my environment?

My apache is 1.3.46 on 32-bit CentOS 5.6.

10% popularity Vote Up Vote Down