View Single Post
  #3  
Old 04-30-2012, 08:41 PM
webizen webizen is offline
LiteSpeed Staff
 
Join Date: Oct 2010
Posts: 2,389
Quote:
Originally Posted by QuantumNet View Post
Okay well here is a question for you, I have been in a long discussion with Igor regarding suexec vs lsapi php security... Because we are using CageFS the user can only see their own files... but if you use suexec then and attacker can delete a customers site and or easily add malicious code to their files.
...
But isnt it true that LVE controls dont work in suexec mode? so wouldnt my above recommendation of CageFS +php lsapi work with LVE???
suEXEC needs to be enabled for CageFS to work. pls pm the steps to reproduce the issue so we can look into it.
Reply With Quote