无论如何要为用户开发创建一个php沙箱？

Question

A user on my site and I are going to be developing a new web app. Id like to create a folder that we can work in without the fear that he could read outside that folder potentially reading config files etc.

Is there a way to create a sandboxed area that would prevent the user from including outside that folder - while still keeping the rest of the site the same?

Almost like an open_basedir for that one folder.

Answer 1

This is usually done by configuring the web server to run under an unprivileged user that has access to a selected few directories only.