2014-09-25 204 views
2

我安装的应用程序报告它能够写入配置文件,并且我应该将权限更改为644或444.权限当前为644.该文件由拥有所有权的相同用户拥有网络文件(我用于FTP和SSH的同一用户)不是root用户,所以如果我拥有权限444,我将无法以任何方式修改文件,除非获得root访问权限。 (这不是我的服务器,所以我不得不要求这个。)我的问题是,如果644意味着只有所有者可以写入文件,PHP如何能够写入文件?我听说过诸如suPHP之类的东西,它们使您能够以与指定用户相同的权限运行PHP。我在命令行运行“php -i”并搜索“suPHP”,但什么也没找到。这是或多或少完全转储:如何防止PHP写入具有权限644的配置文件?

PHP Version => 5.4.22 

System => Linux 2.6.32-431.23.3.el6.x86_64 #1 SMP Thu Jul 31 17:20:51 UTC 2014 x86_64 
Build Date => Dec 2 2013 17:53:19 
Configure Command => './configure' '--disable-fileinfo' '--enable-bcmath' '--enable-calendar' '--enable-exif' '--enable-ftp' '--enable-gd-native-ttf' '--enable-libxml' '--enable-mbstring' '--enable-pdo=shared' '--enable-soap' '--enable-sockets' '--enable-wddx' '--enable-zip' '--prefix=/usr/local' '--with-curl=/opt/curlssl/' '--with-freetype-dir=/usr' '--with-gd' '--with-gettext' '--with-imap=/opt/php_with_imap_client/' '--with-imap-ssl=/usr' '--with-jpeg-dir=/usr' '--with-kerberos' '--with-libdir=lib64' '--with-libexpat-dir=/usr' '--with-libxml-dir=/opt/xml2' '--with-libxml-dir=/opt/xml2/' '--with-mcrypt=/opt/libmcrypt/' '--with-mysql=/usr' '--with-mysql-sock=/var/lib/mysql/mysql.sock' '--with-mysqli=/usr/bin/mysql_config' '--with-openssl=/usr' '--with-openssl-dir=/usr' '--with-pcre-regex=/opt/pcre' '--with-pdo-mysql=shared' '--with-pdo-sqlite=shared' '--with-pic' '--with-png-dir=/usr' '--with-pspell' '--with-tidy=/opt/tidy/' '--with-xmlrpc' '--with-xpm-dir=/usr' '--with-xsl=/opt/xslt/' '--with-zlib' '--with-zlib-dir=/usr' 
Server API => Command Line Interface 
Virtual Directory Support => disabled 
Configuration File (php.ini) Path => /usr/local/lib 
Loaded Configuration File => /usr/local/lib/php.ini 
Scan this dir for additional .ini files => (none) 
Additional .ini files parsed => (none) 
PHP API => 20100412 
PHP Extension => 20100525 
Zend Extension => 220100525 
Zend Extension Build => API220100525,NTS 
PHP Extension Build => API20100525,NTS 
Debug Build => no 
Thread Safety => disabled 
Zend Signal Handling => disabled 
Zend Memory Manager => enabled 
Zend Multibyte Support => provided by mbstring 
IPv6 Support => enabled 
DTrace Support => disabled 

Registered PHP Streams => https, ftps, compress.zlib, php, file, glob, data, http, ftp, phar, zip 
Registered Stream Socket Transports => tcp, udp, unix, udg, ssl, sslv3, sslv2, tls 
Registered Stream Filters => zlib.*, convert.iconv.*, mcrypt.*, mdecrypt.*, string.rot13, string.toupper, string.tolower, string.strip_tags, convert.*, consumed, dechunk 

This program makes use of the Zend Scripting Language Engine: 
Zend Engine v2.4.0, Copyright (c) 1998-2013 Zend Technologies 
    with the ionCube PHP Loader v4.4.1, Copyright (c) 2002-2013, by ionCube Ltd., and 
    with Zend Guard Loader v3.3, Copyright (c) 1998-2013, by Zend Technologies 


_______________________________________________________________________ 


Configuration 

bcmath 

BCMath support => enabled 

Directive => Local Value => Master Value 
bcmath.scale => 0 => 0 

calendar 

Calendar support => enabled 

Core 

PHP Version => 5.4.22 

Directive => Local Value => Master Value 
allow_url_fopen => On => On 
allow_url_include => On => On 
always_populate_raw_post_data => Off => Off 
arg_separator.input => & => & 
arg_separator.output => & => & 
asp_tags => Off => Off 
auto_append_file => no value => no value 
auto_globals_jit => On => On 
auto_prepend_file => no value => no value 
browscap => no value => no value 
default_charset => no value => no value 
default_mimetype => text/html => text/html 
disable_classes => no value => no value 
disable_functions => no value => no value 
display_errors => Off => Off 
display_startup_errors => Off => Off 
doc_root => no value => no value 
docref_ext => no value => no value 
docref_root => no value => no value 
enable_dl => Off => Off 
enable_post_data_reading => On => On 
error_append_string => no value => no value 
error_log => error_log => error_log 
error_prepend_string => no value => no value 
error_reporting => 32759 => 32759 
exit_on_timeout => Off => Off 
expose_php => Off => Off 
extension_dir => /usr/local/lib/php/extensions/no-debug-non-zts-20100525 => /usr/local/lib/php/extensions/no-debug-non-zts-20100525 
file_uploads => On => On 
highlight.comment => <font style="color: #FF8000">#FF8000</font> => <font style="color: #FF8000">#FF8000</font> 
highlight.default => <font style="color: #0000BB">#0000BB</font> => <font style="color: #0000BB">#0000BB</font> 
highlight.html => <font style="color: #000000">#000000</font> => <font style="color: #000000">#000000</font> 
highlight.keyword => <font style="color: #007700">#007700</font> => <font style="color: #007700">#007700</font> 
highlight.string => <font style="color: #DD0000">#DD0000</font> => <font style="color: #DD0000">#DD0000</font> 
html_errors => Off => Off 
ignore_repeated_errors => Off => Off 
ignore_repeated_source => Off => Off 
ignore_user_abort => Off => Off 
implicit_flush => On => On 
include_path => .:/usr/lib/php:/usr/local/lib/php => .:/usr/lib/php:/usr/local/lib/php 
log_errors => On => On 
log_errors_max_len => 1024 => 1024 
mail.add_x_header => Off => Off 
mail.force_extra_parameters => no value => no value 
mail.log => no value => no value 
max_execution_time => 0 => 0 
max_file_uploads => 20 => 20 
max_input_nesting_level => 64 => 64 
max_input_time => -1 => -1 
max_input_vars => 1000 => 1000 
memory_limit => 128M => 128M 
open_basedir => no value => no value 
output_buffering => 0 => 0 
output_handler => no value => no value 
post_max_size => 10M => 10M 
precision => 14 => 14 
realpath_cache_size => 16K => 16K 
realpath_cache_ttl => 120 => 120 
register_argc_argv => On => On 
report_memleaks => On => On 
report_zend_debug => Off => Off 
request_order => no value => no value 
sendmail_from => no value => no value 
sendmail_path => /usr/sbin/sendmail -t -i => /usr/sbin/sendmail -t -i 
serialize_precision => 17 => 17 
short_open_tag => On => On 
SMTP => localhost => localhost 
smtp_port => 25 => 25 
sql.safe_mode => Off => Off 
track_errors => Off => Off 
unserialize_callback_func => no value => no value 
upload_max_filesize => 50M => 50M 
upload_tmp_dir => no value => no value 
user_dir => no value => no value 
user_ini.cache_ttl => 300 => 300 
user_ini.filename => .user.ini => .user.ini 
variables_order => GPCS => GPCS 
xmlrpc_error_number => 0 => 0 
xmlrpc_errors => Off => Off 
zend.detect_unicode => On => On 
zend.enable_gc => On => On 
zend.multibyte => Off => Off 
zend.script_encoding => no value => no value 

ctype 

ctype functions => enabled 

curl 

cURL support => enabled 
cURL Information => 7.24.0 
Age => 3 
Features 
AsynchDNS => No 
Debug => No 
GSS-Negotiate => No 
IDN => Yes 
IPv6 => Yes 
Largefile => Yes 
NTLM => Yes 
SPNEGO => No 
SSL => Yes 
SSPI => No 
krb4 => No 
libz => Yes 
CharConv => No 
Protocols => dict, file, ftp, ftps, gopher, http, https, imap, imaps, pop3, pop3s, rtsp, smtp, smtps, telnet, tftp 
Host => x86_64-unknown-linux-gnu 
SSL Version => OpenSSL/1.0.0 
ZLib Version => 1.2.3 

date 

date/time support => enabled 
"Olson" Timezone Database Version => 2013.8 
Timezone Database => internal 
Default timezone => America/Denver 

Directive => Local Value => Master Value 
date.default_latitude => 31.7667 => 31.7667 
date.default_longitude => 35.2333 => 35.2333 
date.sunrise_zenith => 90.583333 => 90.583333 
date.sunset_zenith => 90.583333 => 90.583333 
date.timezone => America/Denver => America/Denver 

dom 

DOM/XML => enabled 
DOM/XML API Version => 20031129 
libxml Version => 2.9.0 
HTML Support => enabled 
XPath Support => enabled 
XPointer Support => enabled 
Schema Support => enabled 
RelaxNG Support => enabled 

ereg 

Regex Library => Bundled library enabled 

exif 

EXIF Support => enabled 
EXIF Version => 1.4 $Id$ 
Supported EXIF Version => 0220 
Supported filetypes => JPEG,TIFF 

Directive => Local Value => Master Value 
exif.decode_jis_intel => JIS => JIS 
exif.decode_jis_motorola => JIS => JIS 
exif.decode_unicode_intel => UCS-2LE => UCS-2LE 
exif.decode_unicode_motorola => UCS-2BE => UCS-2BE 
exif.encode_jis => no value => no value 
exif.encode_unicode => ISO-8859-15 => ISO-8859-15 

filter 

Input Validation and Filtering => enabled 
Revision => $Id: 6496ccdb6a0a4792ced7f000203981dd4afe3657 $ 

Directive => Local Value => Master Value 
filter.default => unsafe_raw => unsafe_raw 
filter.default_flags => no value => no value 

ftp 

FTP support => enabled 

gd 

GD Support => enabled 
GD Version => bundled (2.1.0 compatible) 
FreeType Support => enabled 
FreeType Linkage => with freetype 
FreeType Version => 2.3.11 
GIF Read Support => enabled 
GIF Create Support => enabled 
JPEG Support => enabled 
libJPEG Version => 6b 
PNG Support => enabled 
libPNG Version => 1.2.49 
WBMP Support => enabled 
XPM Support => enabled 
libXpm Version => 30411 
XBM Support => enabled 

Directive => Local Value => Master Value 
gd.jpeg_ignore_warning => 0 => 0 

gettext 

GetText Support => enabled 

hash 

hash support => enabled 
Hashing Engines => md2 md4 md5 sha1 sha224 sha256 sha384 sha512 ripemd128 ripemd160 ripemd256 ripemd320 whirlpool tiger128,3 tiger160,3 tiger192,3 tiger128,4 tiger160,4 tiger192,4 snefru snefru256 gost adler32 crc32 crc32b fnv132 fnv164 joaat haval128,3 haval160,3 haval192,3 haval224,3 haval256,3 haval128,4 haval160,4 haval192,4 haval224,4 haval256,4 haval128,5 haval160,5 haval192,5 haval224,5 haval256,5 

iconv 

iconv support => enabled 
iconv implementation => glibc 
iconv library version => 2.12 

Directive => Local Value => Master Value 
iconv.input_encoding => ISO-8859-1 => ISO-8859-1 
iconv.internal_encoding => ISO-8859-1 => ISO-8859-1 
iconv.output_encoding => ISO-8859-1 => ISO-8859-1 

imap 

IMAP c-Client Version => 2007f 
SSL Support => enabled 
Kerberos Support => enabled 

json 

json support => enabled 
json version => 1.2.1 

libxml 

libXML support => active 
libXML Compiled Version => 2.9.0 
libXML Loaded Version => 20900 
libXML streams => enabled 

mbstring 

Multibyte Support => enabled 
Multibyte string engine => libmbfl 
HTTP input encoding translation => disabled 
libmbfl version => 1.3.2 

mbstring extension makes use of "streamable kanji code filter and converter", which is distributed under the GNU Lesser General Public License version 2.1. 

Multibyte (japanese) regex support => enabled 
Multibyte regex (oniguruma) backtrack check => On 
Multibyte regex (oniguruma) version => 4.7.1 

Directive => Local Value => Master Value 
mbstring.detect_order => no value => no value 
mbstring.encoding_translation => Off => Off 
mbstring.func_overload => 0 => 0 
mbstring.http_input => pass => pass 
mbstring.http_output => pass => pass 
mbstring.http_output_conv_mimetypes => ^(text/|application/xhtml\+xml) => ^(text/|application/xhtml\+xml) 
mbstring.internal_encoding => no value => no value 
mbstring.language => neutral => neutral 
mbstring.strict_detection => Off => Off 
mbstring.substitute_character => no value => no value 

mcrypt 

mcrypt support => enabled 
mcrypt_filter support => enabled 
Version => 2.5.8 
Api No => 20021217 
Supported ciphers => cast-128 gost rijndael-128 twofish arcfour cast-256 loki97 rijndael-192 saferplus wake blowfish-compat des rijndael-256 serpent xtea blowfish enigma rc2 tripledes 
Supported modes => cbc cfb ctr ecb ncfb nofb ofb stream 

Directive => Local Value => Master Value 
mcrypt.algorithms_dir => no value => no value 
mcrypt.modes_dir => no value => no value 

mysql 

MySQL Support => enabled 
Active Persistent Links => 0 
Active Links => 0 
Client API version => 5.5.37 
MYSQL_MODULE_TYPE => external 
MYSQL_SOCKET => /var/lib/mysql/mysql.sock 
MYSQL_INCLUDE => -I/usr/include/mysql 
MYSQL_LIBS => -L/usr/lib64 -lmysqlclient 

Directive => Local Value => Master Value 
mysql.allow_local_infile => On => On 
mysql.allow_persistent => On => On 
mysql.connect_timeout => 60 => 60 
mysql.default_host => no value => no value 
mysql.default_password => no value => no value 
mysql.default_port => no value => no value 
mysql.default_socket => /var/lib/mysql/mysql.sock => /var/lib/mysql/mysql.sock 
mysql.default_user => no value => no value 
mysql.max_links => Unlimited => Unlimited 
mysql.max_persistent => Unlimited => Unlimited 
mysql.trace_mode => Off => Off 

mysqli 

MysqlI Support => enabled 
Client API library version => 5.5.37 
Active Persistent Links => 0 
Inactive Persistent Links => 0 
Active Links => 0 
Client API header version => 5.5.32 
MYSQLI_SOCKET => /var/lib/mysql/mysql.sock 

Directive => Local Value => Master Value 
mysqli.allow_local_infile => On => On 
mysqli.allow_persistent => On => On 
mysqli.default_host => no value => no value 
mysqli.default_port => 3306 => 3306 
mysqli.default_pw => no value => no value 
mysqli.default_socket => /var/lib/mysql/mysql.sock => /var/lib/mysql/mysql.sock 
mysqli.default_user => no value => no value 
mysqli.max_links => Unlimited => Unlimited 
mysqli.max_persistent => Unlimited => Unlimited 
mysqli.reconnect => Off => Off 

mysqlnd 

mysqlnd => enabled 
Version => mysqlnd 5.0.10 - 20111026 - $Id: e707c415db32080b3752b232487a435ee0372157 $ 
Compression => supported 
SSL => supported 
Command buffer size => 4096 
Read buffer size => 32768 
Read timeout => 31536000 
Collecting statistics => Yes 
Collecting memory statistics => No 
Tracing => n/a 
Loaded plugins => mysqlnd,example,debug_trace,auth_plugin_mysql_native_password,auth_plugin_mysql_clear_password 
API Extensions => pdo_mysql 

mysqlnd statistics => 
bytes_sent => 0 
bytes_received => 0 
packets_sent => 0 
packets_received => 0 
protocol_overhead_in => 0 
protocol_overhead_out => 0 
bytes_received_ok_packet => 0 
bytes_received_eof_packet => 0 
bytes_received_rset_header_packet => 0 
bytes_received_rset_field_meta_packet => 0 
bytes_received_rset_row_packet => 0 
bytes_received_prepare_response_packet => 0 
bytes_received_change_user_packet => 0 
packets_sent_command => 0 
packets_received_ok => 0 
packets_received_eof => 0 
packets_received_rset_header => 0 
packets_received_rset_field_meta => 0 
packets_received_rset_row => 0 
packets_received_prepare_response => 0 
packets_received_change_user => 0 
result_set_queries => 0 
non_result_set_queries => 0 
no_index_used => 0 
bad_index_used => 0 
slow_queries => 0 
buffered_sets => 0 
unbuffered_sets => 0 
ps_buffered_sets => 0 
ps_unbuffered_sets => 0 
flushed_normal_sets => 0 
flushed_ps_sets => 0 
ps_prepared_never_executed => 0 
ps_prepared_once_executed => 0 
rows_fetched_from_server_normal => 0 
rows_fetched_from_server_ps => 0 
rows_buffered_from_client_normal => 0 
rows_buffered_from_client_ps => 0 
rows_fetched_from_client_normal_buffered => 0 
rows_fetched_from_client_normal_unbuffered => 0 
rows_fetched_from_client_ps_buffered => 0 
rows_fetched_from_client_ps_unbuffered => 0 
rows_fetched_from_client_ps_cursor => 0 
rows_affected_normal => 0 
rows_affected_ps => 0 
rows_skipped_normal => 0 
rows_skipped_ps => 0 
copy_on_write_saved => 0 
copy_on_write_performed => 0 
command_buffer_too_small => 0 
connect_success => 0 
connect_failure => 0 
connection_reused => 0 
reconnect => 0 
pconnect_success => 0 
active_connections => 0 
active_persistent_connections => 0 
explicit_close => 0 
implicit_close => 0 
disconnect_close => 0 
in_middle_of_command_close => 0 
explicit_free_result => 0 
implicit_free_result => 0 
explicit_stmt_close => 0 
implicit_stmt_close => 0 
mem_emalloc_count => 0 
mem_emalloc_amount => 0 
mem_ecalloc_count => 0 
mem_ecalloc_amount => 0 
mem_erealloc_count => 0 
mem_erealloc_amount => 0 
mem_efree_count => 0 
mem_efree_amount => 0 
mem_malloc_count => 0 
mem_malloc_amount => 0 
mem_calloc_count => 0 
mem_calloc_amount => 0 
mem_realloc_count => 0 
mem_realloc_amount => 0 
mem_free_count => 0 
mem_free_amount => 0 
mem_estrndup_count => 0 
mem_strndup_count => 0 
mem_estndup_count => 0 
mem_strdup_count => 0 
proto_text_fetched_null => 0 
proto_text_fetched_bit => 0 
proto_text_fetched_tinyint => 0 
proto_text_fetched_short => 0 
proto_text_fetched_int24 => 0 
proto_text_fetched_int => 0 
proto_text_fetched_bigint => 0 
proto_text_fetched_decimal => 0 
proto_text_fetched_float => 0 
proto_text_fetched_double => 0 
proto_text_fetched_date => 0 
proto_text_fetched_year => 0 
proto_text_fetched_time => 0 
proto_text_fetched_datetime => 0 
proto_text_fetched_timestamp => 0 
proto_text_fetched_string => 0 
proto_text_fetched_blob => 0 
proto_text_fetched_enum => 0 
proto_text_fetched_set => 0 
proto_text_fetched_geometry => 0 
proto_text_fetched_other => 0 
proto_binary_fetched_null => 0 
proto_binary_fetched_bit => 0 
proto_binary_fetched_tinyint => 0 
proto_binary_fetched_short => 0 
proto_binary_fetched_int24 => 0 
proto_binary_fetched_int => 0 
proto_binary_fetched_bigint => 0 
proto_binary_fetched_decimal => 0 
proto_binary_fetched_float => 0 
proto_binary_fetched_double => 0 
proto_binary_fetched_date => 0 
proto_binary_fetched_year => 0 
proto_binary_fetched_time => 0 
proto_binary_fetched_datetime => 0 
proto_binary_fetched_timestamp => 0 
proto_binary_fetched_string => 0 
proto_binary_fetched_blob => 0 
proto_binary_fetched_enum => 0 
proto_binary_fetched_set => 0 
proto_binary_fetched_geometry => 0 
proto_binary_fetched_other => 0 
init_command_executed_count => 0 
init_command_failed_count => 0 
com_quit => 0 
com_init_db => 0 
com_query => 0 
com_field_list => 0 
com_create_db => 0 
com_drop_db => 0 
com_refresh => 0 
com_shutdown => 0 
com_statistics => 0 
com_process_info => 0 
com_connect => 0 
com_process_kill => 0 
com_debug => 0 
com_ping => 0 
com_time => 0 
com_delayed_insert => 0 
com_change_user => 0 
com_binlog_dump => 0 
com_table_dump => 0 
com_connect_out => 0 
com_register_slave => 0 
com_stmt_prepare => 0 
com_stmt_execute => 0 
com_stmt_send_long_data => 0 
com_stmt_close => 0 
com_stmt_reset => 0 
com_stmt_set_option => 0 
com_stmt_fetch => 0 
com_deamon => 0 
bytes_received_real_data_normal => 0 
bytes_received_real_data_ps => 0 

example statistics => 
stat1 => 0 
stat2 => 0 

openssl 

OpenSSL support => enabled 
OpenSSL Library Version => OpenSSL 1.0.0-fips 29 Mar 2010 
OpenSSL Header Version => OpenSSL 1.0.0-fips 29 Mar 2010 

pcre 

PCRE (Perl Compatible Regular Expressions) Support => enabled 
PCRE Library Version => 8.21 2011-12-12 

Directive => Local Value => Master Value 
pcre.backtrack_limit => 1000000 => 1000000 
pcre.recursion_limit => 100000 => 100000 

PDO 

PDO support => enabled 
PDO drivers => sqlite, mysql 

pdo_mysql 

PDO Driver for MySQL => enabled 
Client API version => mysqlnd 5.0.10 - 20111026 - $Id: e707c415db32080b3752b232487a435ee0372157 $ 

Directive => Local Value => Master Value 
pdo_mysql.default_socket => /var/lib/mysql/mysql.sock => /var/lib/mysql/mysql.sock 

pdo_sqlite 

PDO Driver for SQLite 3.x => enabled 
SQLite Library => 3.7.7.1 

Phar 

Phar: PHP Archive support => enabled 
Phar EXT version => 2.0.1 
Phar API version => 1.1.1 
SVN revision => $Id: c85687ef5cec51a63c41cffb9ec3972cb8c3f7f3 $ 
Phar-based phar archives => enabled 
Tar-based phar archives => enabled 
ZIP-based phar archives => enabled 
gzip compression => enabled 
bzip2 compression => disabled (install pecl/bz2) 
OpenSSL support => enabled 


Phar based on pear/PHP_Archive, original concept by Davey Shafik. 
Phar fully realized by Gregory Beaver and Marcus Boerger. 
Portions of tar implementation Copyright (c) 2003-2009 Tim Kientzle. 
Directive => Local Value => Master Value 
phar.cache_list => no value => no value 
phar.readonly => On => On 
phar.require_hash => On => On 

posix 

Revision => $Id: 32db6705f5b617967a546be3114e178a4138c1ca $ 

pspell 

PSpell Support => enabled 

Reflection 

Reflection => enabled 
Version => $Id: c4a7c554f00da47fe9cff384d18c532a1a959dff $ 

session 

Session Support => enabled 
Registered save handlers => files user 
Registered serializer handlers => php php_binary wddx 

Directive => Local Value => Master Value 
session.auto_start => Off => Off 
session.cache_expire => 180 => 180 
session.cache_limiter => nocache => nocache 
session.cookie_domain => no value => no value 
session.cookie_httponly => Off => Off 
session.cookie_lifetime => 0 => 0 
session.cookie_path =>/=>/
session.cookie_secure => Off => Off 
session.entropy_file => no value => no value 
session.entropy_length => 0 => 0 
session.gc_divisor => 1000 => 1000 
session.gc_maxlifetime => 1440 => 1440 
session.gc_probability => 1 => 1 
session.hash_bits_per_character => 4 => 4 
session.hash_function => 0 => 0 
session.name => PHPSESSID => PHPSESSID 
session.referer_check => no value => no value 
session.save_handler => files => files 
session.save_path => /tmp => /tmp 
session.serialize_handler => php => php 
session.upload_progress.cleanup => On => On 
session.upload_progress.enabled => On => On 
session.upload_progress.freq => 1% => 1% 
session.upload_progress.min_freq => 1 => 1 
session.upload_progress.name => PHP_SESSION_UPLOAD_PROGRESS => PHP_SESSION_UPLOAD_PROGRESS 
session.upload_progress.prefix => upload_progress_ => upload_progress_ 
session.use_cookies => On => On 
session.use_only_cookies => On => On 
session.use_trans_sid => 0 => 0 

SimpleXML 

Simplexml support => enabled 
Revision => $Id: 2358f2be6570ab413d0ead3a931a5365adf94af9 $ 
Schema support => enabled 

soap 

Soap Client => enabled 
Soap Server => enabled 

Directive => Local Value => Master Value 
soap.wsdl_cache => 1 => 1 
soap.wsdl_cache_dir => /tmp => /tmp 
soap.wsdl_cache_enabled => 1 => 1 
soap.wsdl_cache_limit => 5 => 5 
soap.wsdl_cache_ttl => 86400 => 86400 

sockets 

Sockets Support => enabled 

SPL 

SPL support => enabled 
Interfaces => Countable, OuterIterator, RecursiveIterator, SeekableIterator, SplObserver, SplSubject 
Classes => AppendIterator, ArrayIterator, ArrayObject, BadFunctionCallException, BadMethodCallException, CachingIterator, CallbackFilterIterator, DirectoryIterator, DomainException, EmptyIterator, FilesystemIterator, FilterIterator, GlobIterator, InfiniteIterator, InvalidArgumentException, IteratorIterator, LengthException, LimitIterator, LogicException, MultipleIterator, NoRewindIterator, OutOfBoundsException, OutOfRangeException, OverflowException, ParentIterator, RangeException, RecursiveArrayIterator, RecursiveCachingIterator, RecursiveCallbackFilterIterator, RecursiveDirectoryIterator, RecursiveFilterIterator, RecursiveIteratorIterator, RecursiveRegexIterator, RecursiveTreeIterator, RegexIterator, RuntimeException, SplDoublyLinkedList, SplFileInfo, SplFileObject, SplFixedArray, SplHeap, SplMinHeap, SplMaxHeap, SplObjectStorage, SplPriorityQueue, SplQueue, SplStack, SplTempFileObject, UnderflowException, UnexpectedValueException 

sqlite3 

SQLite3 support => enabled 
SQLite3 module version => 0.7 
SQLite Library => 3.7.7.1 

Directive => Local Value => Master Value 
sqlite3.extension_dir => no value => no value 

standard 

Dynamic Library Support => enabled 
Path to sendmail => /usr/sbin/sendmail -t -i 

Directive => Local Value => Master Value 
assert.active => 1 => 1 
assert.bail => 0 => 0 
assert.callback => no value => no value 
assert.quiet_eval => 0 => 0 
assert.warning => 1 => 1 
auto_detect_line_endings => 0 => 0 
default_socket_timeout => 60 => 60 
from => no value => no value 
url_rewriter.tags => a=href,area=href,frame=src,input=src,form=fakeentry => a=href,area=href,frame=src,input=src,form=fakeentry 
user_agent => no value => no value 

tidy 

Tidy support => enabled 
libTidy Release => 25 March 2009 
Extension Version => 2.0 ($Id$) 

Directive => Local Value => Master Value 
tidy.clean_output => 0 => 0 
tidy.default_config => no value => no value 

tokenizer 

Tokenizer Support => enabled 

wddx 

WDDX Support => enabled 
WDDX Session Serializer => enabled 

xml 

XML Support => active 
XML Namespace Support => active 
EXPAT Version => expat_2.0.1 

xmlreader 

XMLReader => enabled 

xmlrpc 

core library version => xmlrpc-epi v. 0.51 
php extension version => 0.51 
author => Dan Libby 
homepage => http://xmlrpc-epi.sourceforge.net 
open sourced by => Epinions.com 

xmlwriter 

XMLWriter => enabled 

xsl 

XSL => enabled 
libxslt Version => 1.1.27 
libxslt compiled against libxml Version => 2.9.0 
EXSLT => enabled 
libexslt Version => 1.1.27 

Zend Guard Loader 

Zend Guard Loader => enabled 
License Path => 
Obfuscation level => 0 

zip 

Zip => enabled 
Extension Version => $Id: 1f435bbb002ed00b47964fbd6e3b1cea9b161c07 $ 
Zip version => 1.11.0 
Libzip version => 0.10.1 

zlib 

ZLib Support => enabled 
Stream Wrapper => compress.zlib:// 
Stream Filter => zlib.inflate, zlib.deflate 
Compiled Version => 1.2.3 
Linked Version => 1.2.3 

Directive => Local Value => Master Value 
zlib.output_compression => Off => Off 
zlib.output_compression_level => -1 => -1 
zlib.output_handler => no value => no value 

Additional Modules 

Module Name 
ionCube Loader 

Environment 

Variable => Value 
TERM => xterm-256color 
SHELL => /bin/bash 
HISTSIZE => 1000 
SSH_TTY => /dev/pts/0 
LANG => en_US.UTF-8 
HISTCONTROL => ignoredups 
SHLVL => 1 
CVS_RSH => ssh 
LESSOPEN => |/usr/bin/lesspipe.sh %s 
G_BROKEN_FILENAMES => 1 
_ => /usr/local/bin/php 

PHP Variables 

Variable => Value 
_SERVER["TERM"] => xterm-256color 
_SERVER["SHELL"] => /bin/bash 
_SERVER["HISTSIZE"] => 1000 
_SERVER["SSH_TTY"] => /dev/pts/0 
_SERVER["LANG"] => en_US.UTF-8 
_SERVER["HISTCONTROL"] => ignoredups 
_SERVER["SHLVL"] => 1 
_SERVER["CVS_RSH"] => ssh 
_SERVER["LESSOPEN"] => |/usr/bin/lesspipe.sh %s 
_SERVER["G_BROKEN_FILENAMES"] => 1 
_SERVER["_"] => /usr/local/bin/php 
_SERVER["PHP_SELF"] => 
_SERVER["SCRIPT_NAME"] => 
_SERVER["SCRIPT_FILENAME"] => 
_SERVER["PATH_TRANSLATED"] => 
_SERVER["DOCUMENT_ROOT"] => 
_SERVER["REQUEST_TIME_FLOAT"] => 1411615476.0286 
_SERVER["REQUEST_TIME"] => 1411615476 
_SERVER["argv"] => Array 
(
) 

_SERVER["argc"] => 0 
+0

“我跑 “PHP -i” 在命令行和搜索为“suPHP”,但什么也没找到。“从命令行运行的PHP与作为Apache模块运行的PHP无关。 Apache PHP在Apache用户下运行。因此,要确定设置的内容,您必须通过Web浏览器使用命令'phpinfo()'运行PHP脚本。 – JakeGould 2014-09-25 04:21:38

+0

我也试过,但没有找到任何对suPHP的引用。 – 2014-09-25 04:24:20

+0

问题在于你的Apache服务器是以root身份运行的,因此用户可以做任何事情。这不是很好的做法。这也是更多的服务器问题,所以它属于ServerFault。 – JakeGould 2014-09-25 04:26:47

回答

0

如果您正在使用Apache作为Web服务器,大多数时候它使用www数据的用户编写的文件,但并非总是如此。

ps aux | grep httpd 

检查运行apache的用户,也许它是该文件夹的所有者。

+0

我检查了所有者和public_html文件夹组。所有者是拥有所有网络文件的同一用户(称之为“域名所有者”),但该组的字面意思是“无人”。相反,public_html中的所有文件属于“domainowner”组(不是字面意思,我的意思是该组与文件所有者具有相同的名称)。我运行了你建议的命令,结果在大多数情况下都是“无人”或“根”(在一行中用户被确定为一个数字)。因此,如果我将文件夹public_html属于与所有者相同名称的组而不是“nobody”,那么它将解决此问题? – 2014-09-25 03:59:40

+0

如果您的组权限是644,唯一重要的是用户。 644中的6表示创建文件的用户可以读取和写入文件。 4表示该组只能读取该文件。与他人同上; 4只允许阅读。 – JakeGould 2014-09-25 04:24:18

+0

那么PHP如何能够写入文件呢? – 2014-09-25 04:25:42

1

要找出用户脚本运行的(这在一般情况下并不一定相同文件的所有者),你可以检查的输出:如果该用户是

$user_info = posix_getpwuid(posix_geteuid()); 
echo $user_info['name']; 

运行速度快,远离您当前的主机。

但它可能不是。

如果返回的用户与文件所有者(您通过ssh等登录的用户)相同,chmod配置文件为400 - 不需要它是世界可读的。如果它是不同的用户chmod 444

当您需要修改文件:

  1. chmod u+w your.file来设置用户可写位。 (如果你拥有的文件,你可以这即使该文件是只读的。)
  2. 做修改。
  3. chmod u-w your.file删除可写位。

chmod u+w相同chmod 600chmod 644,取决于开始的权限,而u-w逆转它。)

+0

+1,如果通过PHP的[chmod](http://php.net/manual/en/function.chmod.php)函数执行此操作,则还必须使用八进制模式(即0444)。 – Grizly 2014-09-25 06:52:15