chown / chgrp of a http owned file after upload

[Bix]

Hiya,

I have written as part of my CMS, an image upload system, now when the
images are placed in the destination folder, they are owned by httpd.root
and I need to get them to be owned by siteuser.sitegroup.

I have tried to chmod and chgrp it to siteuser.sitegroup but it gives
permission denied errors.

Is there any way round this without enabling run as root? Or is there a safe
way to do this?

Thanks.

[Adrian]

you could setup a cronjob running as root which chowns the files.
or maybe you can so something with sudo




------------------------
--
Adrian
mailto:adrian@planetcoding.net
www: [url]http://www.planetcoding.net[/url]
www: [url]http://www.webskyline.de[/url]

[Bix]

Not sure about cron, but will look into sudo.

Thanks!
"Adrian" <adrian@planetcoding.net> wrote in message
news:622461083.20030806132548@planetcoding.net...

> you could setup a cronjob running as root which chowns the files.
> or maybe you can so something with sudo
>
>
>
>
> ------------------------
> --
> Adrian
> mailto:adrian@planetcoding.net
> www: [url]http://www.planetcoding.net[/url]
> www: [url]http://www.webskyline.de[/url]
>
>

[Mike Migurski]

>I have written as part of my CMS, an image upload system, now when the

>images are placed in the destination folder, they are owned by httpd.root
>and I need to get them to be owned by siteuser.sitegroup.
>
>I have tried to chmod and chgrp it to siteuser.sitegroup but it gives
>permission denied errors.
>
>Is there any way round this without enabling run as root? Or is there a
>safe way to do this?

You can ch(mod|own|grp) the files in the upload script, right after they
are written to disk. chmod a+rwX is a good option if you are not overly
concerned about the security of these files. Are you getting
permission-denied errors when attempting to do this in your script, or
afterwards, on the command-line?

---------------------------------------------------------------------
michal migurski- contact info and pgp key:
sf/ca [url]http://mike.teczno.com/contact.html[/url]

[Bix]

This is the part of the code as it stands, it gives a permission denied
error.

$imtemp=$_FILES['file']['tmp_name'];
$imsize=$_FILES['file']['size'];
$imname=$_FILES['file']['name'];
if ($imsize > "100000") {zerror("Image too large","Please go back and
correct, image must be less than 100k"); unlink ($imtemp);}
if (file_exists($_SERVER['DOCUMENT_ROOT'] . "/zeus_images/" .
$_POST['folder'] . "/" . $imname)){zerror("File already exists","The
filename $imname is already used"); unlink ($imtemp);}
if (move_uploaded_file($imtemp,$_SERVER['DOCUMENT_ROOT'] . "/zeus_images/"
.. $_POST['folder'] . "/" . $imname)){
if (chown($_SERVER['DOCUMENT_ROOT'] . "/zeus_images/" . $_POST['folder']
.. "/" . $imname, $site_user) && chmod($_SERVER['DOCUMENT_ROOT'] .
"/zeus_images/" . $_POST['folder'] . "/" . $imname,0644) &&
chgrp($_SERVER['DOCUMENT_ROOT'] . "/zeus_images/" . $_POST['folder'] . "/" .
$imname,$site_group)){
message ("file uploaded","File Uploaded!","File successfully uploaded
as $imname to folder " . $_POST['folder']);
}
else {
unlink ($_SERVER['DOCUMENT_ROOT'] . "/zeus_images/" . $_POST['folder'] .
"/" . $imname);
zerror("File CHMOD / CHOWN / CHGRP error");
}
}
else {
zerror ("File Upload Error");
}

"Mike Migurski" <mike@saturn5.com> wrote in message
news:Pine.GSO.4.52.0308061021310.2596@atari...

> >I have written as part of my CMS, an image upload system, now when the
> >images are placed in the destination folder, they are owned by httpd.root
> >and I need to get them to be owned by siteuser.sitegroup.
> >
> >I have tried to chmod and chgrp it to siteuser.sitegroup but it gives
> >permission denied errors.
> >
> >Is there any way round this without enabling run as root? Or is there a
> >safe way to do this?

>
> You can ch(mod|own|grp) the files in the upload script, right after they
> are written to disk. chmod a+rwX is a good option if you are not overly
> concerned about the security of these files. Are you getting
> permission-denied errors when attempting to do this in your script, or
> afterwards, on the command-line?
>
> ---------------------------------------------------------------------
> michal migurski- contact info and pgp key:
> sf/ca [url]http://mike.teczno.com/contact.html[/url]
>