通常状态下PHP是以httpd.conf里设定的User身份的权限来运行的&＃xff0c;一般默认为apache&＃xff0c;httpd等等。有时会遇到权限的问题&＃xff0c;可以用perl去写一个cgi script来操作&＃xff0c;对于PHP比较熟悉也可以用php来写&＃xff0c;然后用suPHP这个工具来使其以php文件属主的身份来运行它。

suPHP包括一个Apache的模块(mod_suphp)和一个setuid-root的suphp命令。由于suphp这个命令是 setuid-root了的&＃xff0c;所以还是有一定风险&＃xff0c;尽管作者称到现在还没有发现任何bug。(“Although I currently don’t know any bug in suPHP I can’t guarantee that there aren’t any.”;)

FC4 (Apache 2.0.54 / PHP 4.4.1)下安装配置如下&＃xff1a;
下载最新的 suPHP 0.6.1&＃xff0c;解压缩&＃xff0c;进入suphp-0.6.1目录&＃xff1a;
./configure –prefix&＃61;/usr –with-apxs&＃61;/usr/sbin/apxs –sysconfdir&＃61;/etc/httpd/conf –with-apache-user&＃61;apache –with-setid-mode&＃61;owner
make
make install———-
配置文件/etc/httpd/conf/suphp.conf&＃xff1a;
———-
[global]
;Path to logfile
logfile&＃61;/var/log/suphp.log

;Loglevel
loglevel&＃61;info

;User Apache is running as
webserver_user&＃61;apache

;Path all scripts have to be in
docroot&＃61;/

;Path to chroot() to before executing script
;chroot&＃61;/mychroot

; Security options
allow_file_group_writeable&＃61;false
allow_file_others_writeable&＃61;false
allow_directory_group_writeable&＃61;false
allow_directory_others_writeable&＃61;false

;Check wheter script is within DOCUMENT_ROOT
check_vhost_docroot&＃61;true

;Send minor error messages to browser
errors_to_browser&＃61;false

;PATH environment variable
env_path&＃61;/bin:/usr/bin

;Umask to set, specify in octal notation
umask&＃61;0077

; Minimum UID
min_uid&＃61;0

; Minimum GID
min_gid&＃61;0

[handlers]
;Handler for php-scripts
x-httpd-php&＃61;php:/usr/bin/php-cgi

;Handler for CGI-scripts
x-suphp-cgi&＃61;execute:!self

———-
配置文件/etc/httpd/conf/httpd.conf&＃xff1a;
———-
…
LoadModule suphp_module modules/mod_suphp.so
…
#在suphp这个目录测试一下


suPHP_Engine on
suPHP_ConfigPath /etc
suPHP_AddHandler x-httpd-php
AddHandler x-httpd-php .php


…

在 /web/document/root/suphp 目录下写个 test_suphp.php 试试&＃xff1a;
&＃96;touch /root/testsuphp&＃96;;
$output &＃61; &＃96;ls -l /root&＃96;;
echo “

$output
”;
?>