1

I made a small website where people can upload their files into my server.

Every member have their own folder and they can't open or show other people directories.

Their links looks like this:

example.com/sub/james/

example.com/sub/mark/

example.com/sub/jason/

Members have an option to uploud php, java, html or any kind of file they want.

I made it like that because I want to give the ability for them to host a tiny website on my server, so for example if someone reach this link:

example.com/sub/mark/index.php It will open their home page. and anyone on internet can access that page, also no one can go back behind the main "sub" folder

I'm concerned about the security, "giving access to my server and let members upload any kind of file" what could go wrong? and how I can make it more secure?

2

I suggests to use a different user by user on Web server (see Apache-ITK). This will allow each user to not browse all the names and go in the other users.

You must think also about CPU and RAM : you will maybe forced to use a limit by user. Concerning disks, quotas are welcome.

Don't forget the max execution time to not allow them to run every time process

If you use PHP, remove all the execution of system programs in disable_functions.

After that, you will enable logs by users.

Do not forget the backups ! And maybe a database server if you need...

It can be interersting to limit the network connection from this host to Internet, if the user forget to update its prefered CMS

Good luck and welcome in shared hosting.

  • Okay, I will lock into that, thanks, just a tiny question, is there any open source code that these webhosting providers use to manage webhosting? I made mine from scratch php+java, but I don't think it's gonna be secure enough, my problem is; I don't have full access to the server, I'm limited to alot of things, like for example I want to give users emails from my domain but I don't know how I can manage that! is there an open source code to give email services like google! I'm sorry alot of questions.. – Someone May 4 at 12:15
  • It exists some opensource soft to manage the users and the hosting, mails and ftp (see cPanel by example). But you must have access to the server as root to install ! – Dom May 4 at 12:30

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.