Need safe mode On but for only 1 client

[verticalhost]

I currently run php safe mode off. I have a client requesting that his account have safe mode turned on.

I am running CentOS 3.4 and have php 5.04, zend, phpsuexec and more.
I've tried php_admin_flag safe_mode 1 but no prevail.

Please advise.

Thanks,
David Guerra

[tuxdesk]

php_admin_flag safe_mode On

try this in /usr/local/apache/conf/httpd.conf

[__arjun__]

That should be entered your clients virtualhost entry, otherwise the changes would be global.
Another solution is to use .htaccess file to control this ( But I am not sure whether this works or not. Check it out in any case )

php_flag safe_mode 1

If this doesn't work, then adding the following lines

 php_admin_flag safe_mode on

in your clients virtualhost entry would be enough.


BTW, have you confirmed that php safe mode for your client is indeed off?
Just setup one phpinfo page for your client and check if its indeed off.

[Izzee]

I am running CentOS 3.4 and have php 5.04, zend, phpsuexec and more.

...Another solution is to use .htaccess file to control this ( But I am not sure whether this works or not. Check it out in any case )

This will not work with apache compiled with phpSuExec. You must use a php.ini file in the users web root or a directory the script is called from.

Safe mode on or off is not a concern when phpSuexec is used. But if your client wants it turned on then a php.ini file in the web root (public_html) or the directory where a php script is called, with:
safe_mode = On
will do the trick.

When safe mode was turned on it would take a fit if the UID/GID were different to the clients but with phpSuExec this is not a problem as all UID/GIDs belong to the client.

As David (verticalhost) has phpSuExec installed any reference to a .htaccess file is irrelevant.

[WebScHoLaR]

I currently run php safe mode off. I have a client requesting that his account have safe mode turned on.

I am running CentOS 3.4 and have php 5.04, zend, phpsuexec and more.
I've tried php_admin_flag safe_mode 1 but no prevail.

Please advise.

Thanks,
David Guerra

You can do it for one account by adding the following line in the .htaccess file:

php_flag safe_mode on

But make sure that you cannot alter the php.ini settings with .htaccess when running PHP as cgi/phpsuexec.

Check this link,

http://webhostingtalk.com/showthread.php?t=421482

[verticalhost]

Thanks for the advise. I will try these and let you know which one worked.

[verticalhost]

Just for the usefulness of everyone else.

If you have php safemode off and phpsuexec enabled, then you can safemode a single user account by adding a file named php.ini in the public_html folder.

The contents of php.ini should be

--------cut-----------

safe_mode = On

--------cut-----------

Works like a charm.

Thanks!

[verticalhost]

Sorry,

Not everything is a charm yet.

When adding the php.ini file it only does 1 directory.
The user is needing all directories to be in safe mode.
Anymore ideas?

[tuxdesk]

Read this Carefully and tweak httpd.conf

http://in.php.net/features.safe-mode
http://in.php.net/manual/en/configur...changes.apache
http://in.php.net/manual/en/security.php