Permission prob. in plugins which is installed via Spartacus

Creating and modifying plugins.
Post Reply
deathline
Regular
Posts: 7
Joined: Tue May 30, 2006 12:05 pm

Permission prob. in plugins which is installed via Spartacus

Post by deathline » Thu Aug 17, 2006 1:00 pm

Hi developer!

In Serendipity version 1.0
When I have installed any plugins with spartacus 2.7 (permissions and owner is blank ) plugins work but;

Files have been written permissions "755" and owners "nobody".Plugin can works but , i cant write, rename, edit, delete any files this folders with ftp.

When permissions 777 and owner's is my domain in spartacus, files have been written permission 777 and owner's agains "nobody" , i can edit, rename etc. but cant change permissions in concerned folder and files.

Plugins which is installed with ftp work perfectly and no permission change problem and edit,rename etc. Their folders permission is 755.

I know its a bit long problem but i cant resolve it.Someone say me , if file written with php owners will apache user/group and cant delete with ftp , although i can delete some files with a little php script which files i cant touch via ftp.

What can i do for using Spartacus problemless?

Regards

User avatar
garvinhicking
Core Developer
Posts: 30020
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Re: Permission prob. in plugins which is installed via Spart

Post by garvinhicking » Thu Aug 17, 2006 1:02 pm

Hi!

You can configure the spartacus plugin to set which owner/permission it applies to downloadde files - I think you refer to this, already?

For existing files/dirs, check the "fixperm.php" script in the www.s9y.org FAQ. When changing the settings in the plugin this only applies to new files; not those already existing.

Best regards
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/

deathline
Regular
Posts: 7
Joined: Tue May 30, 2006 12:05 pm

Re: Permission prob. in plugins which is installed via Spart

Post by deathline » Thu Aug 17, 2006 2:37 pm

garvinhicking wrote:You can configure the spartacus plugin to set which owner/permission it applies to downloadde files - I think you refer to this, already?


I've tried configure the spartacus for owner's and permission various like

owner permission
---------------------------
blank blank -----> cant edit files with ftp, cant change perm.
mydomain 755 -----> cant edit files with ftp, cant change perm.
mydomain 777 -----> can edit files with ftp, cant change perm.

Summary i cant write files via "my ftp account owner" so i cant touch files with ftp.Everytimes files owner seems "nobody".

Thanks your abbrevation

Regards

User avatar
garvinhicking
Core Developer
Posts: 30020
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Re: Permission prob. in plugins which is installed via Spart

Post by garvinhicking » Thu Aug 17, 2006 2:39 pm

Hi!

Are you entering the right owner name? If the files are always created as "nobody" this either means you are not entering a valid owner name, or your hoster has disabled the "chown()" PHP command.

HTH,
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/

Hathor
Regular
Posts: 118
Joined: Tue Mar 22, 2005 11:48 pm

Post by Hathor » Sat Aug 19, 2006 9:17 pm

What IS the right owner name? Because most of my plugin files are 777 and I can't change them, I've been hacked recently. According, S9 shouldn't even allow permissions settings to belong to "nobody", as this is a security issue. :(

I'm currently having to go through and change every single file by hand using the fixperm, which is really not how I wanted to spend my weekend.

What is the correct setting for this NOT to happen again?

User avatar
garvinhicking
Core Developer
Posts: 30020
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Post by garvinhicking » Mon Aug 21, 2006 11:36 am

Hi!

The right owner name is the name of your webserver user or the name of your FTP user.

All PHP applications set permissions to "nobody", because that is what a webserver runs as. PHP does not know what the "right" name is. That's why the spartacus plugin allows you to define it. :)

I'm currently having to go through and change every single file by hand using the fixperm, which is really not how I wanted to spend my weekend.


You can adapt that via glob() calls in PHP, or make some foreach loops to enter a list of filenames.

So the correct setting for the future is the proper username of your FTP user. And of course your webserver+PHP must be configured to allow chown() calls.

Best regards,
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/

Post Reply