Permissions

**stukelly** · #1 (**permalink**) 11-02-2009, 16:06

Just before Christmas we transferred our reseller account to a semi dedicated server. Since then we have had trouble with file permissions for uploading files.

We are using the PHP copy function.

On the reseller hosting does the PHP/Apache user have different default permissions than the semi dedicated server?

eUK-Martin · #2 (**permalink**) 12-02-2009, 04:32

Which OS do you have on your Semi-dedicated.. Linux or Windows..?

**stukelly** · #3 (**permalink**) 12-02-2009, 08:55

We used Linux on both accounts.

Rock · #4 (**permalink**) 12-02-2009, 08:56

Quote:

Originally Posted by stukelly

Just before Christmas we transferred our reseller account to a semi dedicated server. Since then we have had trouble with file permissions for uploading files.

We are using the PHP copy function.

On the reseller hosting does the PHP/Apache user have different default permissions than the semi dedicated server?

Hello Stuart,

Yes, you're right.. our shared/reseller servers are setup with SuExec & suPHP method, to which I think your Semi Dedicated server isn't, as these modules aren't enabled by default cPanel configuration.

SuExec is an Apache module; as the name suggests executes files using the SU command - SU command simply switches users under which a process runs. That gives users the capability to run CGI and SSI programs using user IDs that are different from the user ID of the calling web server.. This effectively means that CGI and SSI programs will not have access to the root account or have root permissions. In other words, although the web server is using Apache/Nobody as user/group, once you initiate a script to be run from your account, it will be run with your own username. Having that said, since all files/folders and process runs are owned by your username, 777 permissions equals 755 ones in functionality.

su is usually the simplest and most convenient way to change the ownership of a login session to any other user. Since lots of CGI scripts are used to send mail, it will be easier to watch them those who send emails using such scripts..

While suPHP is a tool for executing PHP scripts with the permissions of their owners. It consists of an Apache module (mod_suphp) and a setuid root binary (suphp) that is called by the Apache module to change the uid of the process executing the PHP interpreter.

Basically, SuExec is used for CGI/SSI scripts whereas suPHP typically for PHP ones.. Having both of them configured/setup on your server would be recommended as it'd be a step closer towards security. If you want to have these modules to be installed on your server, please contact our VPS or Support Dept & they'd get this done for you quickly, it requires a simple change in the config from WHM & the PHP/Apache recompile using the easyapache script..

eUK-Martin · #5 (**permalink**) 13-02-2009, 07:13

Great work Rock...!!

I suppose it would be easy to switch to PHPSuexec rather than playing with the permissions.. if you have problems switching, you can ask our VPS team to do it for you..

**stukelly** · #6 (**permalink**) 13-02-2009, 08:37

I've asked your support team to switch the server to suPHP.

eUK-Martin · #7 (**permalink**) 13-02-2009, 09:15

Quote:

Originally Posted by stukelly

I've asked your support team to switch the server to suPHP.

Great.. I hope things would get sorted for you.

**stukelly** · #8 (**permalink**) 14-02-2009, 21:42

It is working great now, thanks for your support