Databases
StackOverflow2013
Postsdbo
POApache able to execute file outside web server root directory
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POApache able to execute file outside web server root directory
    primarykey
    data
    text
    <p>I have XAMP installed on my mac and I tried running the command - <code>ps axo user,group,comm | grep httpd</code> to know what user apache is running as. I am getting multiple results one for root and others as nobody. So what is apache running as? A root or nobody and why do I get both root and nobody? Is it because httpd started as a root and then became nobody?</p> <p>The result of <code>ps axo user,group,comm | grep httpd</code> I get is - </p> <pre> root 20 /Applications/XAMPP/xamppfiles/bin/httpd nobody -1 /Applications/XAMPP/xamppfiles/bin/httpd nobody -1 /Applications/XAMPP/xamppfiles/bin/httpd nobody -1 /Applications/XAMPP/xamppfiles/bin/httpd nobody -1 /Applications/XAMPP/xamppfiles/bin/httpd nobody -1 /Applications/XAMPP/xamppfiles/bin/httpd nobody -1 /Applications/XAMPP/xamppfiles/bin/httpd nobody -1 /Applications/XAMPP/xamppfiles/bin/httpd nobody -1 /Applications/XAMPP/xamppfiles/bin/httpd nobody -1 /Applications/XAMPP/xamppfiles/bin/httpd nobody -1 /Applications/XAMPP/xamppfiles/bin/httpd nobody -1 /Applications/XAMPP/xamppfiles/bin/httpd </pre> <p>Secondly, when I execute the following script - <code>echo shell_exec('whoami');</code> (from <a href="https://stackoverflow.com/questions/2509334/finding-out-what-user-apache-is-running-as">https://stackoverflow.com/questions/2509334/finding-out-what-user-apache-is-running-as</a>) I just get the result as - <code>nobody</code></p> <p>The reason I want to know the user is because the php engine is actually able to execute a php file(mysql_details.php) that's outside the web server root directory. And this mysql_details.php has following permissions - <code>rwxr--r--</code> i.e. just read permission for other and group. So if apache user is nobody then how can it execute mysql_details.php.</p> <p>Thanks, Prat.</p>
    singulars
    1. PO
      singulars
      1. PTAnswer
    1. This table or related slice is empty.
    1. PTQuestion
    1. USCommunity
    1. USStudent
    plurals
    1. PL
      singulars
      1. LTLinked
    2. PL
      singulars
      1. LTLinked
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    1. This table or related slice is empty.
    1. COThe permission issue I can't answer of the top of my head, but I will say that the location of the target executable within the file system is irrelevant, it is permission only that matter here. The fact that the target executable resides outside DocRoot has no bearing on whether PHP can access it unless you apply a [chroot](http://en.wikipedia.org/wiki/Chroot)
      singulars
      1. POApache able to execute file outside web server root directory
      1. USDaveRandom
    2. COdoes that mean phpengine can execute any file in the filesystem if it has the executable bit set?
      singulars
      1. POApache able to execute file outside web server root directory
      1. USStudent
    3. COIf PHP can name the file (see chroot link) and the executable bit is set for world, a group that the PHP user belongs to, or owner and the PHP user owns the script, then yes. File system location has no effect on this rule
      singulars
      1. POApache able to execute file outside web server root directory
      1. USDaveRandom
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload