Re: Secure apache with php

2009-07-09 Thread Mister Olli
Hi, I'm currently using mpm-itk (on debian, but should be replaced with freebsd soon ;-)). I'm quite happy with the solution as it's easy to setup many user accounts for web without ugly access right stuff and all that. apache never made a problem after setup :-) unfortunately I've never had the

Re: Secure apache with php

2009-07-09 Thread Pierre Guinoiseau
Just build www/apache22 with WITH_MPM=itk and you'll have it. :) Then add something like this in each vhost: AssignUserId my_user my_group Nicolas Letellier wrote: > Le Thu, 09 Jul 2009 14:36:11 +0200, > Julien Cigar a écrit : > >>> When I tested php in cgi, performances were bad. T

Re: Secure apache with php

2009-07-09 Thread Nicolas Letellier
Le Thu, 09 Jul 2009 14:36:11 +0200, Julien Cigar a écrit : > > When I tested php in cgi, performances were bad. That's why, > > php_mod is better (in my case != > > > > It's not CGI, it's FastCGI. > There is no performance loss if you use an opcode cacher (like > x-cache). > And is anyboy use

Re: Secure apache with php

2009-07-09 Thread Julien Cigar
On Thu, 2009-07-09 at 13:43 +0200, Nicolas Letellier wrote: > Le Thu, 09 Jul 2009 12:49:57 +0200, > Julien Cigar a écrit : > > > What I do is running PHP in FastCGI mode (with something like x-cache) > > with a dedicated user for each webapp for which I have a dedicated > > script, for example :

Re: Secure apache with php

2009-07-09 Thread Nicolas Letellier
Le Thu, 09 Jul 2009 12:49:57 +0200, Julien Cigar a écrit : > What I do is running PHP in FastCGI mode (with something like x-cache) > with a dedicated user for each webapp for which I have a dedicated > script, for example : > > = > jci...@bccm-it ~ % ls -l /usr/local/www/apache22/cgi-bi

Re: Secure apache with php

2009-07-09 Thread Julien Cigar
What I do is running PHP in FastCGI mode (with something like x-cache) with a dedicated user for each webapp for which I have a dedicated script, for example : = jci...@bccm-it ~ % ls -l /usr/local/www/apache22/cgi-bin (...) -rwxr-xr-x 1 www-scarwww-scar202 Oct 27 2008 scar-php-w

Re: Secure apache with php

2009-07-09 Thread Reko Turja
I want to secure my Apache/PHP environment... Full suhosin, both patch and mod for the PHP. IIRC suhosin patch is optional in PHP port and the mod can be installed via ports. (http://www.hardened-php.net/suhosin/index.html) Apache environment and binaries set up in a jail. Which Apache vers

Re: Secure apache with php

2009-07-09 Thread Nicolas Letellier
Le Thu, 9 Jul 2009 13:18:39 +0300, "Reko Turja" a écrit : > > I want to secure my Apache/PHP environment... > > Full suhosin, both patch and mod for the PHP. IIRC suhosin patch is > optional in PHP port and the mod can be installed via ports. > (http://www.hardened-php.net/suhosin/index.html) >

Secure apache with php

2009-07-09 Thread Nicolas Letellier
Hello. I want to secure my Apache/PHP environment without : - safe_mode - suphp / suexec So, I found this : http://mpm-itk.sesse.net/ In this page, we can see that a FreeBSD port exists, but I can't find it. What do you thinh about it? This tool seems to be good. Which Apache version do you ad