<HELP>Hosting virtual host on server

hct224 · 08-08-2003, 08:38 PM

I have question about VHOST. Suppose I have 2 sites(named siteA & siteB), I want to put them in /home/allsites/siteA & /home/allsites/siteB inside each folder(siteA & siteB), I create 2 folders html and log. The html is the DocumentRoot and the error_log is where I store log file. Therfore, the httpd.conf configuration for virtual host will look like:

Code:

<VirtualHost *>
	DocumentRoot /home/allsites/siteA/html
	ServerName siteA.com
	ServerAlias www.siteA.com
	ErrorLog home/allsites/siteA/log/error_log
</VirtualHost>

<VirtualHost *>
	DocumentRoot /home/allsites/siteB/html
	ServerName siteB.com
	ServerAlias www.siteB.com
	ErrorLog home/allsites/siteB/log/error_log
</VirtualHost>

Now, I create 2 account userA for siteA and userB for siteB and they both have FTP access to their own site (/home/allsites/siteA & /home/allsites/siteB). I want userA & userB can only access to their site and they can not use any "hack script"(I mean *.php script) to access other directories or other sites which are on the same server. How do I setup httpd.conf file to do that job?

Thank you

cyph3r7 · 08-08-2003, 09:04 PM

You don't. Your httpd.conf snippet looks good for apache. For FTP you would have to edit the config for FTP to "jail" them to their home directories and when you create the accounts assign /home/allsites/siteA or /home/allsites/siteB as their home dir.

hct224 · 08-08-2003, 09:53 PM

Thanks for the reply. I set FTP account for these sites correctly. However, my friend just give me a php script and he told me upload to either siteA or siteB and lauch web browser and type(for example siteA) http://www.siteA.com/thescript.php and from there I can explore entire my server

Is there anyway to bock that script? I tried to set upper folder(I mean folder allsites own by other user and I receive error 403 when I type http://www.siteA(or www.siteB).com i hear that someone say do "chroot jail" but don't know how.