Enable phpSuExec or not?

[rentasite]

Hi, a few days ago I had an issue on one of my VPS. I can determine what caused the problem by enabling phpSuExec.

Should i or should i not enable it??? Will i have problems with Elxis installations? Because...

As we know phpSuExec makes all PHP scripts execute as the actual user account, not as the 'nobody' user. The negative side to phpSuExec is that it requires all files to be set as 755 (permissions) or lower - 777 will not work anymore. Also, .htaccess files cannot contain php_value, php_flag, or AddType directives.

[rentasite]

No one? 

[datahell]

Most probably you will have write problems to some files but this depends from how you have set up your site. No file should have permissions more than 666! The most secure option is to have files owned by local user and chmod to 644. We do not give guidelines for setting up your servers. We are supporting only Elxis CMS from here.

[rentasite]

Yes i know John. The question was related with the file permissions, only.

[rentasite]

No file should have permissions more than 666! The most secure option is to have files owned by local user and chmod to 644.

Finally i enabled phpSuExec. But i get this message: "Error creating feed file, please check write permissions".

Any idea what permission i should set to which file/folder?

[datahell]

Feed files are RSS/XML files located inside the cache directory. Cache and tmpr folders must be definately writable! Some other files/folders must also be writable (for example flood blocker, defender log files). I suggest you to not enable phpsuexec.

[rentasite]

I suggest you to not enable phpsuexec.

I think keeping PHPSuexec enabled, is better due to security reasons. Even if we may face problems, with ELXIS file's and folder's  permissions. 

I would like to hear any other opinions. Especially if any one else has enabled PHPSuexec.

[Farhad Sakhaei]

use ftp and set it in global configuration ... may be your problem solve

[rentasite]

set what........ in global configuration 

[Farhad Sakhaei]

so all files will writable through enabled ftp ... and you don't need to change any file permission