Secure apache with php

[Mister Olli]

Hi,

I'm currently using mpm-itk (on debian, but should be replaced with
freebsd soon ;-)).

I'm quite happy with the solution as it's easy to setup many user
accounts for web without ugly access right stuff and all that. apache
never made a problem after setup :-)

unfortunately I've never had the time to do futher hardening for mpm-itk
in special (only 'standard' apache/php hardening is applied). but as I'm
planning to keep this setup and extend userbase after move to freebsd
I'm curious what your results will be.

Regards,
---
Mr. Olli


On Thu, 2009-07-09 at 16:05 +0200, Nicolas Letellier wrote:
> Le Thu, 09 Jul 2009 14:36:11 +0200,
> Julien Cigar <jcigar at ulb.ac.be> a écrit :
> 
> > > When I tested php in cgi, performances were bad. That's why,
> > > php_mod is better (in my case !=
> > > 
> > 
> > It's not CGI, it's FastCGI.
> > There is no performance loss if you use an opcode cacher (like
> > x-cache).
> > 
> And is anyboy use mpm-itk ?
> I'm interested more with this solution than another php fix (like
> safe_mode, open_basedir or cgi/fastcie).
>