ok for PHP, but what about the filesystem OK, its true I don't have a problem when running php in safe mode with basedir restriction... But what about the users that do ssh? They can cd into every users directory and read every file?? There have to be DB-passwords somewhere... I don't think that it is a good idea to give world read permission to any user directory by ISPconfig... Just a thought... I can't see any good alternative to ISPconfig and I think I will be happy with it, but this one thing I don't like too much. Think I'm gonna remove it from the code on my own and maybe find another solution as posted above. Anyway, thanks for the tool
You may use chroot ssh. The next ISPConfig Dev release and maybe also the next stable relaese will have ChrootSSH support by default.
I've written achrooted SSH tutorial: http://www.howtoforge.com/chrooted_ssh_howto_debian Maybe it helps you.
