Jump to content


Photo

Open_basedir and subdirectories problem


  • Please log in to reply
No replies to this topic

#1 eugene2006

eugene2006
  • New Members
  • Pip
  • Newbie
  • 7 posts

Posted 18 September 2006 - 06:08 PM

Open_basedir and subdirectories problem
Hi for now I have this httpd-vhosts.conf
php_admin_value open_basedir "C:/aweb/freehosting/users/"

<VirtualHost *:80>
# ServerName pcsny.org
ServerName pcsny

ServerAlias *.pcsny.org
ServerAlias *.massmba.org

VirtualDocumentRoot "C:/aweb/freehosting/users/%1"
php_admin_value open_basedir "C:/aweb/freehosting/users/"
php_admin_value safe_mode 1

<Directory "C:/aweb/freehosting/users/">
  Options Indexes Includes FollowSymLinks
  AllowOverride none
  Order allow,deny
  Allow from all
</Directory>
</VirtualHost>


Script makes under the subdirectory
C:/aweb/freehosting/users/
New folders (they are login name of a new user)
e.g
C:/aweb/freehosting/users/newuser1/
C:/aweb/freehosting/users/seconduser2/
C:/aweb/freehosting/users/mywebhosting/

To access to their web pages users have to type subdomains like this

http://Newuser1.massmba.org/
http://seconduser2.massmba.org/
http://mywebhosting.pcsny.org/

how to force users stay in their folders and not to be able to affect other users with malicious code like

r57shell - http-shell by RST/GHC |
http://rst.void.ru | http://ghc.ru | version 1.24
or http://php.spb.ru/remview/
if only I could do something like this
php_admin_value open_basedir "C:/aweb/freehosting/users/%1"
get subdomain entered in browser then fix top folder accessible for this user….
Help?
PS. I am on windows 2003, XAMPP







0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users