Quote:
Originally Posted by vittorio
I prettty well know what WHM interface does and is for.
What I am talking and digging here about is what a Personal account owner can do about his FTP users and safely manage and host them.
|
Just checking that was the case
As per my previous post put the FTP accounts outside web root if they don't need to have the uploaded content served as that stops the scripts being run from apache.
For those accounts that need their content served the only option I can think of is to create a folder e.g. uploads and then create all your FTP accounts within a folder within that folder.
Next your host needs to add AllowOverride none for that folder to httpd.conf to stop them using .htaccess, the host also needs to disable scripting on that folder.
If you want to allow them to run scripts then there's nothing you can do as the scripts run as the account owner so can access anything the main account owner can, or if php runs in apache context anything apache can.