Apache not allowing me to enter folders belonging to other users
I am trying to set up PHP sessions for suPHP (see here ). I need to have my php validation file owned by the user so that when suPHP kicks in, it will do so for the correct user. However, I also don't want the user to have access to that file, o.w. they can edit it to just return true rather then actually check the database. My first attempt was something like this (where Apache runs as user www-data ) /etc/validate ├── [drwx------ www-data ] user1 │ └── [-rwx------ user1 ] validate.php /var/www/ └── [drwx------ user1 ] user1 └── [-rwx------ user1 ] index.html Then have the web pages redirect