避免以root身份运行apache [关闭]

Question

I am working on Apache server on localhost in Linux mint and need to create new file and folder using php script. But it is returning permission denied on 'mkdir' function.

I googled and found that Apache needs to run as root for such permissions. It is running as 'www-data' in my machine. But I also found that running Apache as root will open many vulnerabilities and there is no situation where Apache is needed to run as root.

How to overcome permission restrictions in apache?

Answer 1

NEVER EVER let apache run as root - in case of any flaws in your PHP, consequences would be TERRIFYING

Also adding www-data to sudoers is like one of the worst ideas I've seen so far

You need root priviliges to MANAGE apache (start/stop etc)

Make sure that the folder in which you have the PHP script belongs to www-data user & group, and it has sufficient permissions. Also, I don't know how your PHP is configured, but if you are using PHP as CGI, make sure that PHP is also running as www-data

system('whoami');

will help you to determine the user :)