I have a Hsphere 3.6S.0SPU installation (that I am begging management to get rid of, but anyways...) that has several customer WordPress installations in it.I have discovered that the only consistant way to permit WordPress to upload stuff is to set the wp-content/upload tree as RWX for the httpd user. This, I know, is terrible because it means that any process running as the httpd user can now write to this directory.I have discovered that I can't run WordPress under suexec because suexec only works with shell-out binaries, not plug-ins like PHP. I have also discovered that there is a plug-in called suPHP which should do what I want -- but I can't find it.The shipped apache config file for hsphere does reference suphp, but only in a commented-out manner, and there are no other files in the hsphere tree that refer to it.My questions:A) is suphp the correct way for securely running WordPress in a multi-tenant environment? andB) if so, where might I find it for my environment?My apache is 1.3.46 on 32-bit CentOS 5.6.
Wordpress in Suexec or suphp
wordpress;php;apache