<HTML>
<HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="OPENWEBMAIL" name=GENERATOR>
</HEAD>
<BODY bgColor=#ffffff>
Yes there is a difference. And SFTP can be a BAD thing! Because while the FTP server limits where a site user or admin can go - SFTP doesn't.
<br />
<br />If you FTP in as a site admin, you can only go up to the <span style="font-weight: bold;">site's</span> root / directory - which translates to /home/sites/www.domain1.tld/. In the FTP session - a user or admin can't even see there is anything higher, let alone get into it.
<br />
<br />But if you SFTP in as that same site admin, you can go all the way up to the <span style="font-weight: bold;">system's</span> root directory. They can browser the entire server's directory tree, and read anything that has readable permissions. Whether they can write files elsewhere in the system or modify them depends on the directory permissions. But that's plausible, especially in the /tmp directory. (Can you imagine what could be done by someone placing executable code in the /tmp directory and then executing it by calling it from a PHP script in their website??)
<br />
<br />Also with SFTP, a site admin can also down from /home/sites/ into other site's /home/site/www.domain2.tld directories and read anything in there that has world read permissions. Potentially things that the owners of domain2 didn't want others to see.
<br />
<br />So its a security issue. That's why I won't allow SFTP by users or site admins on my server. I trust those guys, but only so far. Just have them use FTP or FTPS.
<br />
<br />
<br />
<br />Chuck
<br /><font size="2">
<br />
<br /><b>---------- Original Message
-----------</b>
<br />
From: Wayne Michael <wrmichael@hotmail.com>
<br />
To: <blueonyx@mail.blueonyx.it>
<br />
Sent: Thu, 24 May 2012 12:32:52 -0400
<br />
Subject: [BlueOnyx:10660] Re: FTPS on Blueonyx?
<br />
<br />>
There is a difference with FTPS and SFTP isn't there?
<br />>
<br />> one uses
SSH and other does not.
<br />>
<br />> I use SFTP and that requires SSH to be
turned on (Shell access).
<br /><b>------- End of Original Message
-------</b>
<br />
</font>
</BODY>
</HTML>