View Single Post
Old 12th January 2009, 19:34
till till is offline
Super Moderator
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 37,036
Thanks: 841
Thanked 5,655 Times in 4,464 Posts

I mean now any web can run an online editor and point it to another web-directory and thus modify other users files, as they are all owned by www-data..
This is the case on all webservers and not specific to ispconfig. there are 2 solutions:

1) enable php safemode.
2) switch from mod_php to suphp
Till Brehm
Get ISPConfig support and the ISPConfig 3 manual from
Reply With Quote