Multiple instances of apache+php

Mikolaj Rydzewski miki at ceti.pl
Thu Feb 10 02:45:52 PST 2005


Hello,

To 'harden' my apache/php installation I'd like to run something like 
this:

- apache/php without limitations serving trusted web pages (i.e. from 
/usr/local/www)
- requests for users' pages tunneled via mod_rewrite to another apache/php 
working under different uid on localhost only (with safe_mode, 
open_basedir, and so on) 

This would allow me to run trusted applications without limitations of
safe_mode, disabled functions, etc, and disallow users i.e. from reading
my database passwords from scripts.

The problem is I haven't got any idea how to supply different path to
php.ini for second instance of apache (its location is defined at compile
time). I don't want to install apache/php twice to different locations.
I'd rather install it 'the right way' from ports and use two sets of
configuration files. 

I could tweak startup scripts to change php.ini just before starting
second instance of apache (this file is read once, just after start), but
such hack doesn't sound nice to me ;-)

Any ideas?

-- 
Mikolaj Rydzewski       <miki at ceti.pl>       http://ceti.pl/~miki/
                     PGP KeyID: 8b12ab02
There are three kinds of people: men, women, and unix.




More information about the freebsd-isp mailing list