regarding ownership of files inside the different web directories

[Ovidiu]

hi there.

I am using ispcfg 2.XX latest version on a server that was installed by following the perfect debian sarge install.

My question is the following:

I am hosting several wordpress installations, for me and friends. Now I have some fundamental understanding problem.

ISPCFG uses i.e. web1_user1 as the format for usernames and web1 as the format for group names. now if I, logged in with the admin account ftp/ssh into my account, all files I create/modify are owned by me and my group aka similar to doing a chown -R web1_user1:web1 /web

BUT to use the wordpress core update and plugin update features, I have to make www-data (the apache2 user used on Debian) the owner, thus enabling any php script, i.e. the wordpress plugin my FTP to write to all files on the server in any of the wordpress installations as they are now all owned by www-data...

I mean now any web can run an online editor and point it to another web-directory and thus modify other users files, as they are all owned by www-data...

I feel there is a solution to this please point me into the right directory or ask for any relevant data I can provide you with.

[till]

I mean now any web can run an online editor and point it to another web-directory and thus modify other users files, as they are all owned by www-data..

This is the case on all webservers and not specific to ispconfig. there are 2 solutions:

1) enable php safemode.
2) switch from mod_php to suphp

[Ovidiu]

thx :-) I'll do some reading up on these two options to find out what suits me best. Thx for the hints and clarifying.

[Ovidiu]

can I install my new server according to the ISPCFG 3.0RC1 installation instructions, then add the tutorial for ssh chroot (http://howtoforge.com/chroot_ssh_sftp_debian_etch) then add the tutorial for suphp (http://howtoforge.com/suphp_debian_etch_ispconfig or http://howtoforge.com/install-suphp-...2.20-and-above)

wil this be a working combination or are there problems?

any advice against employing suphp? I realized it uses php-cgi, what about fastcgi? what do other users use?

[Ovidiu]

just curios what others in this forum use? what solution do you employ?

[till]

In ISPConfig 2 you have only the solutions I posted above. In ISPConfig 3 you have also php as fastcgi.