Multiple instances of the baker

[agensop585]

o.k. i though i read in one of the threads that you should have multiple instances of wb on the same machine because its a security risk
why?
 
i ask because i want to do this
 
ubx
 \_
    |_ubx_wb
    |_agensop_wb
    |_cn_wb
 

each of those folder are different domains with different databases
 
ubx is just the main domain which the others are sub folder off.
but each have different domains pointed to them.
 
can i not do this??

i already have it up and runnong on www.agensop.com/wb/

-agensop.

[agensop585]

i guess either no one knows or the lack of a response means no

[Ryan]

Hi there,

Yes it is possible, and should be fairly secure, although you may want to be careful with handing out permissions.
I would recommend getting a "reseller" account somewhere, so that each domain has a seperate system user/goup account, making things easier to lock down.
Just for a note: if it was all on the same domain, you should change "Application Name" (or APP_NAME) in Settings or the config file.

 

[DGEC]

Yes it is possible, and should be fairly secure, although you may want to be careful with handing out permissions.

What does this mean? Don't allow admin access to sub-site members?

In
http://forum.websitebaker.org/index.php/topic,362.0.html Ryan agreed that different domains should have different session ids so multiple sites could be hosted easier and said it should be an option available in a version of 2.5.x

Is this :

Just for a note: if it was all on the same domain, you should change "Application Name" (or APP_NAME) in Settings or the config file.

... what he was talking about?

I'm trying to do this for different domains. Does it make any difference? I was also thinking I might have sub-sites on directories of my own, so they would be separate but all under my top domain. I could use subdomains for the addressing though.

Also, I can't see an Application name in Settings on 2.5.2

Also, to make WB the default page for the secondary "theirdomain.com" domain, I need to enable Intro page and (optionally) switch on Homepage Redirection?  Or do I not need those since I'm already pointing to the WB directory below mydomain.com

[pcwacht]

Permissions, the file permissions on the directories. You might end up having a user tweaking the wrong directorie.

Application Name (or APP_NAME) is now the Session Identifier wich you need to change at admin -> settings -> advanced settings -> allmost bottom of page

You allso need to check and double check the following lines at each config.php (since wb fetches those during install)
define('WB_URL', 'http://localhost/wb260');
define('ADMIN_URL', 'http://localhost/wb260/admin');


The Session Identifier is used to determine wich session to use, during the session the login etc is stored there, that's why it is best to distinguish them for each installation on same server.

The url's might be detected wrong during install, so you need to check them to see if they points to the right installation.


Good luck,
John

[DGEC]

Permissions, the file permissions on the directories. You might end up having a user tweaking the wrong directorie.

Application Name (or APP_NAME) is now the Session Identifier wich you need to change at admin -> settings -> advanced settings -> allmost bottom of page

You allso need to check and double check the following lines at each config.php (since wb fetches those during install)
define('WB_URL', 'http://localhost/wb260');
define('ADMIN_URL', 'http://localhost/wb260/admin');

Very odd - I must be using a different version than you - its definitely not on the Advanced setting page.  Oh wb260! that's why, I'm "still" at 2.5.2   I'll wait for the upgrade script before moving up. I'll try the direct config.php mod though.

Thanks John

[pcwacht]

In the config.php for WB 2.5.2 :
define('APP_NAME', 'wb');


Good luck,.

John

[DGEC]

Permissions, the file permissions on the directories. You might end up having a user tweaking the wrong directorie.

If I do the other changes, and users don't have login access, only WB access, is this a much of a risk?

In the config.php for WB 2.5.2 :
define('APP_NAME', 'wb');

Yes, I see the APP_NAME in the config file, its just not on the form.

One other question - can I change the APP_NAME from 'wb' on a working site without breaking it? For some reason I thought that APP_NAME is used to look up information in the database?

[pcwacht]

As far as I know the AP_NAME (or the new Session Identifier) only identifies sessions, so changing is ok, but make sure to be logged out when you do, and if it fails, unchange but I hardly think it will...

Only wb rights should be enough I reckon. It is less rights then allso havcing ftp rights....

But remember this, never ever use the same credentials on the database as on the users

Most config.php's (any kind of webbased package) can be read by the webserver. Installing a simple webbased filebrowser and one can read the config's, thus finding the username and password for the databases. I have seen to many isp's using one account for both!


John

[DGEC]

I'm rather vague on the way the DB works.

Are you saying that the user id/password for the host account and the database should be different?

Also, I thought that a *.php file couldn't be read from outside the site? Are you saying that if I put a filebrowser on my site, and pointed at your wb site, it could read the config.php file?

[DGEC]

Also it seems as if I install another instance in separate directory (the install seems to have put in the appropriate directory and WB_URL settings before) and change the APP_NAME (as well as the DB stuff), that should be enough to have multiple instances running.