Need help with configuring ftp server over Apache

[Russel P]

Sponsored Links

I had installed xampp on a home system to fiddle through it a bit, in addition enabled FileZilla Server on it, I opened the firewall and the router to convinced IPs, what I am paying attention in knowing is if the following scenario is probable be able to user add php files to my server with the intention of create changes to my PC. For illustration to plant a php file with the intention of edits crucial files in the C:/Windows directory. Even although the server rootfolder is something similar to D:/Server/htdocs. Or perhaps additional security risks that determine to permit user to damage significant files in my PC.

[Sauk]

You necessitate to harden FileZilla, with the intention of is, create sure with the intention of you do not permit access to system/critical folders and facilitate security settings similar to force correlations to SSL/TLS at the same time as setting the respective ports commencing from the firewall. Perceptibly under Cpanel these are the entire separate users and most of them desire to maintain them with the intention of way, so I have comprised got it so a user logs into brokerdomain site and the database says ok, you are agent 2 associated through agent2 site, /home/agent2/public_html/site_files is where your stuff is stored. I just do not be familiar with how to create an exception for this one user to be capable to have right of entry the "site_files" directory commencing from any user home on the server.

[Nipissing]

Assuming this is actually how you are setup, this is I determine toadvised. I would powerfully recommend altering to moreover SuPHP or FCGI. There is more than a few dissimilar ways to go regarding doing this even taking into deliberation ownerships being a suexec/setuid environment other than I would encompass to be familiar with a diminutive additional regarding your specific layout predominantly what logins your users utilize and are the addon users or the most important account users, etc as this be able to have comprised an impact on which way to go through that. In the simplest commencing form, might just give them their own FTP logins.

[Pocumtuck]

Not sure most of them are on the similar page. Everybody has their own FTP accounts as well as have right of entry to their own cpanel. What I am subsequent to is a way to utilize a centralized PHP application with the intention of be able to still save files to an authoritative user's home directory. As for the rest of your reply, users login through a password with the intention of is verified by the php application. It is totally separate commencing from cpanel, ftp, etc. It's just presently a login to facilitate links them with their account through the broker.

[Ottawa]

Do you necessitate just basically reading files across accounts or editing those files. I be familiar with you are executing as owner and with the intention of is a primary concern. Do you have comprised and open_basedir limits in place. Utilizing a custom config for every user account. At this meticulous point giving the impression of being at this moderately blind, I am inclined to imagine setting up a linux "group" would be the most excellent alternative and then setting your permissions to the file shared connecting this to be group available to the innovative group of which you create mutually users members.

[Pomegranate]

I require to edit the files as well. It's essentially a diminutive xml file with the intention of has user-configurable alternatives in it such as phone number, website settings facilitated, etc. I be able to presently read them commencing from the web, other than the php submission not be able to open them. Then I added the two users to the collection, chmod file permissions for faction read/write, and tried to have right of entry the directory. I in addition tried chown- the directory to the user working with the php app just to observe; that did not work moreover. That was a superior idea, although. I become conscious it's not an ideal setup or an ideal circumstances, other than sometimes most of them have to play the cards we're dealt, you be familiar with.