From owner-freebsd-questions Tue Mar 18 6:29:30 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2088437B404 for ; Tue, 18 Mar 2003 06:29:29 -0800 (PST) Received: from tao.xtaz.co.uk (pc-62-30-69-139-az.blueyonder.co.uk [62.30.69.139]) by mx1.FreeBSD.org (Postfix) with ESMTP id 62F0443F3F for ; Tue, 18 Mar 2003 06:29:25 -0800 (PST) (envelope-from matt@xtaz.co.uk) Received: from webmail.xtaz.co.uk (matt@localhost.xtaz.co.uk [127.0.0.1]) by tao.xtaz.co.uk (8.12.8/8.12.8) with ESMTP id h2IETMxG041277 for ; Tue, 18 Mar 2003 14:29:23 GMT (envelope-from matt@xtaz.co.uk) From: "Matt" To: freebsd-questions@freebsd.org Subject: Re: Insecure PHP installation Date: Tue, 18 Mar 2003 14:29:22 +0000 Message-Id: <20030318142657.M47155@xtaz.co.uk> X-Mailer: Open WebMail 1.90 20030212 X-OriginatingIP: 193.35.129.161 (matt) MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG I just took a look at my freebsd box which has php installed from ports and also a solaris box I have which had php installed from source. Both of them have the same permissions which include: -rwxrwxrw- 1 root other 9290 Jan 6 13:57 pear -rw-rw-rw- 1 root other 7719 Jan 6 13:57 HTTP.php -rw-rw-rw- 1 root other 7279 Jan 6 13:57 Mail.php -rw-rw-rw- 1 root other 28562 Jan 6 13:57 PEAR.php -rw-rw-rw- 1 root other 14780 Jan 6 13:57 System.php etc. So it's a PHP issue, not a freebsd ports issue. --- Matt (matt@xtaz.co.uk) http://www.xtaz.co.uk/ --- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message