confused by file permission

bigtl · 02-02-2006, 03:55 AM

Hi

my webserver is running as user www-data

i have the following file:

-rwxr--r-- 1 root root 4800 2006-02-02 09:47 misc.class.php

yet my php scripts run through the webserver can delete this file. How?

surely if this is owned by root, only root can delete it.

thanks in advance.
tony

marozsas · 02-02-2006, 04:50 AM

Deleting a file (or changing it's name) is an operation on the directory not on the file itself !
So, you have to pay attention to directory permissions.

bigtl · 02-02-2006, 05:56 AM

now it all becomes clear, thanks