The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
3answers
350 views

Apache - suExec - FastCGI - PHP = security issue

I installed Apache with FastCGI (mod_fastcgi), suExec and PHP on my local development box. Working perfectly, except one thing. Let's say I have two users: user1 - /home/user1/public_html user2 - ...
1
vote
2answers
1k views

django + wsgi + suexec + userdir + apache?

I've got a django 1.1 website I want to run in wsgi (as that seems to be the recommended deployment on apache). I want it to run as the www user (apache is running as www-data). I would ideally like ...
0
votes
2answers
398 views

Apache with suexec, fcgid shows content from wrong vHost over ssl

I changed my Apache setup to worker mode, suexec und fcgid as described in this tutorial: https://wiki.hetzner.de/index.php/Apache_PHP5_fcgi_und_SuExec. Allmost everything works fine. I wrote a ...
0
votes
2answers
943 views

PHP with suexec/fcgid

httpd.conf file: LoadModule fcgid_module modules/mod_fcgid.so AddHandler fcgid-script .php FCGIWrapper /usr/local/php5 .php # manual MaxRequestsPerProcess 1000 FcgidMaxProcesses 200 ...
-1
votes
2answers
49 views

How to sandbox a website subfolder?

Let's say I have a website under www.example.com and would like to also have a blog under a subfolder, e.g. www.example.com/blog/. How can I sandbox this folder, so that any script running inside it, ...
3
votes
1answer
754 views

Confusion on SUEXEC and DOCROOT

I keep running into an issue with suexec where it says the cgi script is not in the docroot. I get this error: "[2012-05-21 04:53:02]: command not in docroot (/apps/dctools/www/cgi-bin/test.cgi)" ...
1
vote
1answer
482 views

Configuring Apache2/mpm-worker not to eat up all the server's RAM

Th server is running around 40 WordPress sites. Originally I'd set the server up using mod_php and mpm-prefork back when the server had 2GB of memory, and it was running comfortably well. Recently, ...
1
vote
1answer
246 views

Apache: change PHP suexec user/group per SSL client

I've got a server running several vhost sites, and was wondering if there could be a way to get some vhost PHPs executed under a different user/group depending on the client connecting to them. I ...
1
vote
1answer
257 views

Need advice in setting up server. fastCGI, suExec, speed, security, etc

I am running my own dedicated server with centOS 5 and WHM/cPanel. I would like to configure my server to meet my needs but I need a little help. It will only be my own websites being run on this ...
0
votes
1answer
8 views

suexec AP_DOC_ROOT Path on gentoo

after a few years running php as mod_php I want to move to fcgi. On my server I run currently gentoo linux. I allready set up php als fcgi and everything is working. But there is one problem. I have ...
0
votes
1answer
561 views

PHP-FPM SuExecUserGroup not working

I have installed php, apache, and fastcgi_handler by: emerge dev-lang/php www-apache/mod_fastcgi_handler I managed to make it work by updating the relevant lines in ...
0
votes
1answer
799 views

Errors getting apache working with fcgi and suexec

I have a Debian 6 server and I was previously using Apache with mod_php but decided to switch to using fcgi instead since Wordpress was somehow causing Apache to crash. I have the following in my ...
0
votes
1answer
137 views

apache+php-fpm and security in shared enviroment compared to apache+suexec+mod_fastcgi

I've been using Apache with suexec and mod_fastcgi. It starts up PHP handlers as the selected system user and listens to request via PIPES (fastcgi protocol). It works well but can't share opcode via ...
0
votes
1answer
719 views

Multiple VHosts with FastCGI and Suexec

I have a Debian virtual machine server which I have full control over, but I have someone who wants to host a single domain on it. This is obviously a security concern, as even if his particular user ...
0
votes
1answer
251 views

From suPHP to mod_php

I have a Centos6 64-bit server, Apache/2.2.15, PHP5.3.3, one IP and four name-based virtual hosts and SSL/SNI to provide https in addition to http. All those hosts are assigned to different linux ...
2
votes
0answers
41 views

Suexec PHP does not load php.ini

I'm using FastCGI with suEXEC for PHP on CentOS 7. My wrapper script looks as follows: #!/bin/sh PHPRC=/home/ben/etc/ export PHPRC export TMPDIR=/home/ben/tmp/ exec /usr/bin/php-cgi -c ...
1
vote
0answers
123 views

suexec executes world writable php files and files owned by root. why?

I've configured my server to use suexec for php this weekend. Now I've recognized that suexec also serves files owned by root or that are world writable. But this seems to me not like the standard ...
0
votes
0answers
181 views

suexec in apache 2.4 gives 404 error

I'm getting a 404 when I try to use suexec. I'm using centos 7, apache 2.4.9, and php 5.5.14. I compiled from source. Here is my virtual host: <VirtualHost *:80> ServerAdmin ...
0
votes
0answers
109 views

configuring awstats with suexec

I have a web server with more than 100 websites running apache and php as fcgid and suexec. I have configured awstats on my server(FreeBSD) following awstats installation on FreeBSD but when I try ...