Running as root, yet permission denied

[jn]

They have a server here that runs PHP as root (which is probably bad). I
wrote a test script that tries to create a text file.

echo "<B>I'm running as user: " . $_ENV['USER'] . "</B><BR/><BR/>";

//open the file
echo "<B>Opening file text.txt for writing:</B>";
$fp = fopen('text.txt',w);
echo "<BR/>";

if(!$fp){
echo "<B>UNABLE TO CREATE THE FILE!</B>";
exit;
}
I get a permission denied error. The directory is CHMOD 755.

[B. Johannessen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

jn wrote:

They have a server here that runs PHP as root (which is probably
bad). I wrote a test script that tries to create a text file.

echo "<B>I'm running as user: " . $_ENV['USER'] . "</B><BR/><BR/>";

$USER == root is no guarantee that you are running as root. Try adding:

<?php passthru('id'); ?>
Bob

-----BEGIN PGP SIGNATURE-----
Comment: B. Johannessen <bo*@db.org> - http://db.org/contact/en/

iD8DBQFAQH1OooisUyMOFlgRAtRuAJ9LGAfQn+uOxOctYdSfXm 4VJFdBVwCfVT/v
BW/CT3LehI/jWcSxyeMlm04=
=Ykss
-----END PGP SIGNATURE-----

[jn]

"B. Johannessen" <bo*@db.org> wrote in message
news:i3******************@news4.e.nsc.no...

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

jn wrote:

They have a server here that runs PHP as root (which is probably
bad). I wrote a test script that tries to create a text file.

echo "<B>I'm running as user: " . $_ENV['USER'] . "</B><BR/><BR/>";

$USER == root is no guarantee that you are running as root. Try adding:

<?php passthru('id'); ?>
Bob

-----BEGIN PGP SIGNATURE-----
Comment: B. Johannessen <bo*@db.org> - http://db.org/contact/en/

iD8DBQFAQH1OooisUyMOFlgRAtRuAJ9LGAfQn+uOxOctYdSfXm 4VJFdBVwCfVT/v
BW/CT3LehI/jWcSxyeMlm04=
=Ykss
-----END PGP SIGNATURE-----

Aha:
uid=80(www) gid=80(www) groups=80(www)

So, what do I need to do? Modify the permissions for this user or create a
new user just for PHP?

[Pertti Kosunen]

"jn" <us********************************@jasonnorris.ne t> wrote in message
news:ig**********************@twister.tampabay.rr. com...

Aha:
uid=80(www) gid=80(www) groups=80(www)

So, what do I need to do? Modify the permissions for this user or create a
new user just for PHP?

Modify owner group of directory you want to write (chown root:www
/path/to/dir) and give group www permissions to write (chmod 775
/path/to/dir).

[jn]

"Pertti Kosunen" <pe************@kolumb.us.fi_invalid> wrote in message
news:c1**********@phys-news1.kolumbus.fi...

"jn" <us********************************@jasonnorris.ne t> wrote in message
news:ig**********************@twister.tampabay.rr. com...

Aha:
uid=80(www) gid=80(www) groups=80(www)

So, what do I need to do? Modify the permissions for this user or create a new user just for PHP?

Modify owner group of directory you want to write (chown root:www
/path/to/dir) and give group www permissions to write (chmod 775
/path/to/dir).

It's fixed. Thanks

[Five Cats]

In message <ig**********************@twister.tampabay.rr.com> , jn
<us********************************@jasonnorris.ne t> writes

"B. Johannessen" <bo*@db.org> wrote in message
news:i3******************@news4.e.nsc.no...

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

jn wrote:

> They have a server here that runs PHP as root (which is probably
> bad). I wrote a test script that tries to create a text file.
>
> echo "<B>I'm running as user: " . $_ENV['USER'] . "</B><BR/><BR/>";
$USER == root is no guarantee that you are running as root. Try adding:

<?php passthru('id'); ?>
Bob

-----BEGIN PGP SIGNATURE-----
Comment: B. Johannessen <bo*@db.org> - http://db.org/contact/en/

iD8DBQFAQH1OooisUyMOFlgRAtRuAJ9LGAfQn+uOxOctYdSfXm 4VJFdBVwCfVT/v
BW/CT3LehI/jWcSxyeMlm04=
=Ykss
-----END PGP SIGNATURE-----

Aha:
uid=80(www) gid=80(www) groups=80(www)

So, what do I need to do? Modify the permissions for this user or create a
new user just for PHP?

Ensure you have write permissions to the current working directory - if
that is / it shouldn't be!

--
Five Cats
Email to: cats_spam at uk2 dot net