Forum

CGI Wrapper relies on non CGI userid perms in home dirs

James MacLean
7 February 2012, 13:43
Testing using Hiawatha to give users ability to run PHP as their userid.

Apps exist in /home/<userid>/public_html. Scripts run as <userid>, which is what is wanted, but to run them, hiawatha needs access as non userid to the directory where the script runs. This is allowing <userid> code to look at all other userids public_html.

Hiawatha version: 8.0
Operating System: Linux CentOS 6,2 2.6.32
This topic has been closed.