On Wed, Oct 26, 2011 at 06:58:43PM -0700, Russ Allbery wrote:
> > Also, regarding Apache... Yes, Apache has a legitimate reason for being
> > a daemon that is also an NFS (or AFS, or...) client. However, Apache is
> > effectively a proxy for its clients.
>
> No, that is a rare case for Apache, actually. It's only really true in
> the old world of static web pages, which is vanishing. You almost never
> want the user of a PHP application to have access to the PHP source, which
> is what's stored in the shared file system.
Unfortunately, to be able to fulfil the request of a user, Apache has
to read the PHP code and the (possibly user-specific) data which are
the ground for the page to be dynamically generated.
It is Apache's task to isolate its raw data from the generated one (this
function was less evident with static pages), but this is not controlled
by the raw data access privileges, which we were concerned about here.
Regards,
Rune
lmpx.com only provides a reader for public news (NNTP) servers. It is not
affiliated with the servers or forums shown here and is not responsible for
the content of articles, which is written by their respective authors.