Secure apache with php

Mister Olli mister.olli at
Thu Jul 9 15:27:09 UTC 2009


I'm currently using mpm-itk (on debian, but should be replaced with
freebsd soon ;-)).

I'm quite happy with the solution as it's easy to setup many user
accounts for web without ugly access right stuff and all that. apache
never made a problem after setup :-)

unfortunately I've never had the time to do futher hardening for mpm-itk
in special (only 'standard' apache/php hardening is applied). but as I'm
planning to keep this setup and extend userbase after move to freebsd
I'm curious what your results will be.

Mr. Olli

On Thu, 2009-07-09 at 16:05 +0200, Nicolas Letellier wrote:
> Le Thu, 09 Jul 2009 14:36:11 +0200,
> Julien Cigar <jcigar at> a écrit :
> > > When I tested php in cgi, performances were bad. That's why,
> > > php_mod is better (in my case !=
> > > 
> > 
> > It's not CGI, it's FastCGI.
> > There is no performance loss if you use an opcode cacher (like
> > x-cache).
> > 
> And is anyboy use mpm-itk ?
> I'm interested more with this solution than another php fix (like
> safe_mode, open_basedir or cgi/fastcie).

More information about the freebsd-questions mailing list