Secure apache with php
mister.olli at googlemail.com
Thu Jul 9 15:27:09 UTC 2009
I'm currently using mpm-itk (on debian, but should be replaced with
freebsd soon ;-)).
I'm quite happy with the solution as it's easy to setup many user
accounts for web without ugly access right stuff and all that. apache
never made a problem after setup :-)
unfortunately I've never had the time to do futher hardening for mpm-itk
in special (only 'standard' apache/php hardening is applied). but as I'm
planning to keep this setup and extend userbase after move to freebsd
I'm curious what your results will be.
On Thu, 2009-07-09 at 16:05 +0200, Nicolas Letellier wrote:
> Le Thu, 09 Jul 2009 14:36:11 +0200,
> Julien Cigar <jcigar at ulb.ac.be> a écrit :
> > > When I tested php in cgi, performances were bad. That's why,
> > > php_mod is better (in my case !=
> > >
> > It's not CGI, it's FastCGI.
> > There is no performance loss if you use an opcode cacher (like
> > x-cache).
> And is anyboy use mpm-itk ?
> I'm interested more with this solution than another php fix (like
> safe_mode, open_basedir or cgi/fastcie).
More information about the freebsd-questions