Secure apache with php

[Pierre Guinoiseau]

Just build www/apache22 with WITH_MPM=itk and you'll have it. :)

Then add something like this in each vhost:

  <IfModule mpm_itk_module>
    AssignUserId my_user my_group
  </IfModule>


Nicolas Letellier wrote:
> Le Thu, 09 Jul 2009 14:36:11 +0200,
> Julien Cigar <jcigar at ulb.ac.be> a écrit :
> 
>>> When I tested php in cgi, performances were bad. That's why,
>>> php_mod is better (in my case !=
>>>
>> It's not CGI, it's FastCGI.
>> There is no performance loss if you use an opcode cacher (like
>> x-cache).
>>
> And is anyboy use mpm-itk ?
> I'm interested more with this solution than another php fix (like
> safe_mode, open_basedir or cgi/fastcie).
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 259 bytes
Desc: OpenPGP digital signature
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20090709/b90c4c16/signature.pgp