[linux-help] Re: Linux Apps

[Steven Saner <ssaner@xxxxxxxxxxxxxxx>]

On Fri, Dec 08, 2000 at 01:19:58PM -0600, Jesse Kaufman wrote:
> 
> On Fri, 8 Dec 2000, Lars von dem Ast wrote:
> 
> > pro-Postgres, saying it beats mySQL in some critical areas. Is PHP, 
> > Zope, JSP etc. the death of Perl?
> 
> i don't know about the above being the death of perl, since there are so
> incredibly many uses for perl other than just cgi stuff...  maybe it will
> mean the death of perl used for webpages...  PHP is much simpler than
> perl, and really kewl, but it's not quite as flexible as perl...  take
> some, lose some, i guess...
> 
> couldn't tell you about PostgreSQL vs MySQL, since i've only had a very
> little experience w/ MySQL, but if you go w/ PHP, either one should work
> equally well (as far as interfacing w/ PHP goes)...

A concern I have that maybe someone has dealt with, is running PHP with
Postgres (or MySQL) on a server used by muliple people/customers,
whatever. You can set up a seperate database on the Postgres/MySQL
server for each customer, but how do you keep one customer from
messing with another customer's database. You can put a password on
the database, but how do you store the password in a secure fashion so
your PHP script can send it to the backend when you try to make a
connection?

The problem is caused by the fact that if you run PHP as an Apache
module, the PHP process runs as the same user as the web server,
regardless of whose PHP script you are running. Now, you can run PHP
as a CGI program and with Apache's SUEXEC wrappers you could make it
run as the user who owns the script. But then you lose some of the
performance value and other nice things about having PHP run as a
module.

It would be nice if you could make PHP run a script as the user who
owns the script. Then you could make a single customer's database
accessible only to that user. Maybe there is a way to do this. I
haven't really researched it much yet.


> good luck!
> 
> --
> Jesse Kaufman                           |       WebSurf Internet Access
> Administration / Web Development        |       www.websurf.net
> glandix@xxxxxxxxxxx                     |       Ph: 316.945.7873
> www.linuxfreak.com/~glandix             |       Fax: 316.946.9944
> --
> 
> <<< Vim is a REAL man's text editor.  I don't know why anyone else would
>     even bother with sissy programs like emacs, or even worse...  pico!  >>>
> 
> 
> 
> 
> 
> -- This is the linux-help@xxxxxxxxx list.  To unsubscribe,
> visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi

-- This is the linux-help@xxxxxxxxx list.  To unsubscribe,
visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi