Skip to main content
Webmasters

Return to Question

Title clarity, paragraphs
Source Link
Stephen Ostermiller ♦
Stephen Ostermiller ♦
  • 99.4k
  • 18
  • 141
  • 364

Security issues with Is it a security issue when PHP with cPanel andruns as root in a shared hosting environment?

if this is not the correct forum for this question please tell me!

When one has an account on a shared server host running cPanel, the account runs in a jailed environment where access to files is restricted to /home/myaccount//home/myaccount/ and its subdirectories. 

However PHP runs as root, so is there any security issue possible where another (malicious) account-user could craft phpPHP scripts in such a manner as to access files in another users file area. 

I have heard conflicting stories about this and would like a definitive answer from a "server guru".

Security issues with PHP with cPanel and shared hosting

if this is not the correct forum for this question please tell me!

When one has an account on a shared server host running cPanel, the account runs in a jailed environment where access to files is restricted to /home/myaccount/ and its subdirectories. However PHP runs as root, so is there any security issue possible where another (malicious) account-user could craft php scripts in such a manner as to access files in another users file area. I have heard conflicting stories about this and would like a definitive answer from a "server guru".

Is it a security issue when PHP runs as root in a shared hosting environment?

When one has an account on a shared server host running cPanel, the account runs in a jailed environment where access to files is restricted to /home/myaccount/ and its subdirectories. 

However PHP runs as root, so is there any security issue possible where another (malicious) account-user could craft PHP scripts in such a manner as to access files in another users file area. 

I have heard conflicting stories about this and would like a definitive answer from a "server guru".

Source Link
Jenn
Jenn
  • 21
  • 2

Security issues with PHP with cPanel and shared hosting

if this is not the correct forum for this question please tell me!

When one has an account on a shared server host running cPanel, the account runs in a jailed environment where access to files is restricted to /home/myaccount/ and its subdirectories. However PHP runs as root, so is there any security issue possible where another (malicious) account-user could craft php scripts in such a manner as to access files in another users file area. I have heard conflicting stories about this and would like a definitive answer from a "server guru".