Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We recently experienced a hacker attack, writing directly to the server through php cgi.

I have afterwards made a number of security updates, most importantly disabled mod_cgi in Apache2 which weren't needed anyway. However when i run 'Top', php-cgi is however still appearing from time to time. How is that posible? Is php-cgi different from mod_cgi and do i need to also disable the module in php?

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.