Re: CGI Scripts running as user that started apache

From: Cris Harrison <Webmaster(at)phoenixcomm.net>
Date: Sat Mar 15 2003 - 16:11:32 EST

At 02:30 PM 3/15/2003 -0600, you wrote:
>Uh... Apache comes preinstalled with OpenBSD. That is what I am using.
>So, I'm not sure what you are talking about.

Ok let me start over...
I run a ISP. I have had LOTS of problems with "pre installed packages" I dont like the way apache come pre installed and I have had issues with both preinstalled Apache and Perl on both OpenBSD, SOLARIS, an others

So.. I allways get my source from www.apache.org (dose that mean I dont like 3rd party CVS trees?! RIGHT

and I always install apache @ /usr/local/apache $ ls -al
total 30

drwxr-xr-x  15 root     other        512 Nov  4 22:58 .
drwxr-xr-x  15 root     root         512 Mar  2 12:18 ..
drwxr-xr-x   2 root     other        512 May 20  2001 bin
drwxr-xr-x   2 root     other        512 Mar 31  2001 cgi-bin
drwxr-xr-x   3 root     other        512 Dec 10 02:17 conf
drwxr-xr-x   2 root     other        512 Mar 31  2001 conf.new
drwxr-xr-x  10 root     other       1536 Mar 15 11:30 htdocs
drwxr-xr-x   3 root     other       1024 Mar 31  2001 htdocs.new
drwxr-xr-x   3 root     other       2048 Mar 31  2001 icons
drwxr-xr-x   3 root     other       1024 Mar 31  2001 include
drwxr-xr-x   2 root     other        512 Mar 31  2001 libexec
drwxr-xr-x   2 root     other        512 Jan 17 10:18 logs
drwxr-xr-x   4 root     other        512 Mar 31  2001 man
drwxr-xr-x   2 nobody   nobody       512 Mar 31  2001 proxy
drwxr-xr-x   2 root     other        512 Aug 24  2002 users

$ pwd
/usr/local/apache
$
with my logs @ /var/www/whatever my /var is normally a 2gig partition (this prevents a attack that will fill you disk space to 100% this is real bad...

Again please look at my comments about apache.. apache when configured properly will NEVER give paths past the DIR ROOT (and you can play games with the doc root as well )

         #
         # DocumentRoot: The directory out of which you will serve your
         # documents. By default, all requests are taken from this 
directory, but
         # symbolic links and aliases may be used to point to other locations.
         #
         DocumentRoot "/usr/local/apache/htdocs"

normaly my root would be /usr/local/apache/htdocs but you could put the root at /export/web/webname or even /webname on a realy bizzy server HINT apache parses the dir chain for every GET ... get it?

         #
         # UserDir: The name of the directory which is appended onto a 
user's home
         # directory if a ~user request is received.
         #
         UserDir public_html

or for users @ /home/harrison/public_html thats when you use www.phoenixcomm.net/~harrison

OH YES! you are wrong.....

         Note: For a URL such as
         
http://www.therawvegan.org/wiki/bin/testenv/foo/bar, the correct
         PATH_INFO is /foo/bar, without any prefixed path components. Test this
         now - particularly if you are using Apache or IIS, or are using a web
         hosting provider. The page resulting from the test link should have a
         PATH_INFO of /foo/bar.

Apache will always generate http://www.therawvegan.org/wiki/bin/testenv/foo/bar as apache checks all paths (dir) as for IIS I have no idea that it even works MS=TRASH
and as I said before I am a web hosting company

C Harrison
www.phoenixcomm.net Received on Sat Mar 15 16:13:02 2003