![]() |
![]() |
Never run the web server as root, as anyone who can exploit a flaw in a script can essentially do anything on your Unix system. One such example is parsing the input from a email address:
nobody@home.com;/bin/rm -fr /[c-z]*
The parser would hit ‘;’ and turn command into the shell, whereby if you are running under root, would essentially wipe out your system.