>I am not sure if it is a right email address to ask question, if it is not
>plz disregard this email :)
>if it is this is my Q:
>I am reading a book about php, in its security section, it says " it is more
>secure, as well as more efficient when installing PHP, to install PHP as a
>SAPI module for your Web server that to run it via the CGI interface"
>do you know how can I do that? what is SAPI?
>Thank you for your time
It's definitely more efficient.
A case could be made for times when using PHP as a CGI (via suExec) could be
"more secure" for doing certain kinds of things, though.
I'm not at all there there's any real security difference from Module/CGI
even without the caveats.
Anyway, a SAPI allows PHP to live like a wart on the back of the web server.
So, like, it becomes a part *OF* the web-server which is *already* running,
and waiting to serve up web pages, and if PHP is already there, it just
calls the main PHP function to start doing PHP.
There is ISAPI for IIS, and ASAPI for Apache and so on.
API is A-something Programming Interface or some such, and it's just a fancy
acronym for saying "we designed a logical reasonable set of functions that
you can use to interact with our software without going crazy trying to
figure out all the gory details inside"
I think the "S" part is for "S"erver.
Anyway, for Apache, you just configure it --with-apxs (or --with-apache, but
that's less fun) instead of the php binary in /usr/local/bin. You also
configure httpd.conf with the LoadModule and AddHandler instead of the
Action. (Action is for CGI)
For IIS, you use the php4nts.dll or something like that and make it a
"filter" (MicrosoftIsm for Module) instead of the php.exe
For other web-servers, it's pretty much the same idea, though I got no clue
how to configure them... If you're stuck with one of them, and no PHP
examples are coming up, find a Perl example, and do everything the same,
only plug in PHP where it says Perl.
Like Music? http://l-i-e.com/artists.htm
Off-Topic: What is the moral equivalent of 'cat' in Windows?
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php