httpd.conf and the user nobody

I'm trying to setup a script on my server that allows people to upload zip files and it gets unzipped, renamed, and zipped up again. To do this I'm using the shell_exec function in PHP which is working fine. Except it is running as the user "nobody" which I have heard is a big security risk. I looked in httpd.conf and there was the option to change the default user. I created a user called "www" with all the other parameters empty and changed my httpd.conf file. Apache restarted fine and it all seemed well. But when I went to load any page on the server it said "permission denied, cannot access this page". Is there anything special I have to give the "www" user before I put it as the default user?

Thx in advance.

 

 

 

 

Top