What are the possible issues in installing Symfony on shared hosting

views:

answers:

What are the possible issues in installing Symfony on shared hosting

I have developed an application in symfony which will have to be made live in few days. On a shared hosting service provider like GoDaddy I will have to keep the whole framework in the public_html.

Certainly there are security issues but cant they be fixed in some way or other?

+2 A:

Have you read this page? I think it covers the most severe security issues with symfony and shared hosting. I found it by searching 'symfony shared hosting' on google.

greg0ire 2010-08-21 08:48:43

I have a hard time believing that most professional web hosts actually give every user full access to all others' files. With most commercial shared hosting solutions these days, the only real difference from a dedicated server or VPS is that you have less CPU time and don't have full access on the server to install new software or customize existing software.

Lèse majesté 2010-08-21 08:58:17

I don't think this really is the responsibility of web hosts... if you create directories writable by all, you'll expect them to be writable by other users won't you? What is hard to believe is that Symfony creates folders writable by all...

greg0ire 2010-08-21 09:20:38

Well, they actually give you a good reason for this--because most web servers are configured to run a PHP script as `nobody`, so if they didn't, then they'd have no access to the cache files. So on the one hand, you shouldn't be in the habit of creating publicly writable files/directories, but on the other, you want your PHP scripts to run with the least privileges possible to minimize the damage caused by a malicious script. And given that most shared hosts don't trust their users not to execute malicious scripts or to use proper file permissions, the use of chroot jails makes sense.

Lèse majesté 2010-08-21 09:59:40

The page you have suggested had come to my notice but it only complicates my perception.

Akshar Prabhu Desai 2010-08-24 18:09:50

I realized that Symfony is simply excellent when it comes to dedicated hosting. For very security conscious person it is a simply No-No situation but in that case even shared hosting should be No-No for such applications.

The most annoying thing about symfony was that everything was under public_html. so the user could very easily read by yaml files. I could fix this using hotlink protection. Now thats certainly not fullproof but for my application it is okay.

Akshar Prabhu Desai 2010-08-24 18:12:47

ansaurus

tags:

views:

answers:

What are the possible issues in installing Symfony on shared hosting

related questions