Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

suphp and permissions

Discussion in 'General Discussion' started by jerrybell, Nov 9, 2007.

  1. jerrybell

    jerrybell Well-Known Member

    Joined:
    Nov 27, 2006
    Messages:
    90
    Likes Received:
    0
    Trophy Points:
    156
    I just configured apache to use suphp on my whm/cpanel. I'm having a hard time understanding something - I have to have permissions on my web files and directories set to 755. BUT, isn't the point of suphp that it runs the scripts as the user set in the httpd.conf file?

    Am I missing something?
     
    #1 jerrybell, Nov 9, 2007
  2. cPanelDavidG

    cPanelDavidG Technical Product Specialist

    Joined:
    Nov 29, 2006
    Messages:
    11,216
    Likes Received:
    10
    Trophy Points:
    313
    Location:
    Houston, TX
    cPanel Access Level:
    Root Administrator
    PHP scripts will be executed as the user, but not non-PHP items like static HTML, images etc.

    Note, if a script is informing you that permissions must be set to 755, note that the script may not be scripted to be aware of SuPHP (or phpSuExec) environments.
     
    #2 cPanelDavidG, Nov 9, 2007
  3. jerrybell

    jerrybell Well-Known Member

    Joined:
    Nov 27, 2006
    Messages:
    90
    Likes Received:
    0
    Trophy Points:
    156
    thanks for the fast response!

    It makes sense that non php files have to be 755. The scripts are not complaining, but they just bomb out unless they have at least 755.

    I had the impression that suphp would allow me to effectively prevent one customer from being able to read the files of another, but it seems like that is not the case.
     
    #3 jerrybell, Nov 9, 2007
  4. cPanelDavidG

    cPanelDavidG Technical Product Specialist

    Joined:
    Nov 29, 2006
    Messages:
    11,216
    Likes Received:
    10
    Trophy Points:
    313
    Location:
    Houston, TX
    cPanel Access Level:
    Root Administrator
    That's weird, when you first mentioned this I took the index.php of a production WordPress site, changed it to 0700 and everything kept on working just fine (haven't changed it back either).

    How exactly is the script bombing out? Server 500 error or the script itself checking its own permissions and arbitrarily determining it needs 755 permissions?
     
    #4 cPanelDavidG, Nov 9, 2007
  5. jerrybell

    jerrybell Well-Known Member

    Joined:
    Nov 27, 2006
    Messages:
    90
    Likes Received:
    0
    Trophy Points:
    156
    It is working as expected now. I can set the permissions to 750 on .php files and it works.

    Disappointingly, it is MUCH slower when running suphp, but I guess that's the price of security.
     
    #5 jerrybell, Nov 9, 2007
(You must log in or sign up to post here.)
Loading...
Similar Threads - suphp permissions
  1. Un Area

    mod_suphp question

    Un Area, May 14, 2018, in forum: Security
    Replies:
    2
    Views:
    93
    cPanelMichael
    May 15, 2018
  2. joaosavioli

    mod_ruid2+jail apache vs suphp (security)

    joaosavioli, Mar 21, 2018, in forum: EasyApache
    Replies:
    1
    Views:
    223
    cPanelMichael
    Mar 22, 2018
  3. PowerChaos

    SOLVED PHP FPM and SuPHP/Fastcgid

    PowerChaos, Feb 23, 2018, in forum: EasyApache
    Replies:
    5
    Views:
    464
    cPanelMichael
    Feb 26, 2018
  4. ItsMattSon

    How to configure SuPHP to use only the MultiPHP INI file, not user inis, and open_basedir?

    ItsMattSon, Jan 31, 2018, in forum: Security
    Replies:
    30
    Views:
    934
    bgarrant
    Apr 6, 2018
  5. Rakaris Bakaris

    php-fpm works but not suphp

    Rakaris Bakaris, Sep 30, 2017, in forum: EasyApache
    Replies:
    5
    Views:
    591
    cPanelMichael
    Oct 4, 2017

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice