Questions tagged [suphp]

suPHP is a tool for executing PHP scripts with the permissions of their owners.

0
votes
1answer
56 views

possible to stop other users from looking at files of other home directories?

i have to enable apache website access using suphp and enable ssh as well. i have enabled cagefs but i am not able to chroot each user into their own directories. I want that no user leaves his home ...
1
vote
0answers
354 views

how to prevent user from access another user file in php-fpm and nginx as suphp doing

I'm using Nginx and PHP-FPM and have many users , every user has his own user name and group but I see that every php execeutes run as id,uid,gid nobody, also I know that php-fpm.conf has user and ...
1
vote
0answers
566 views

AWS Linux EC2 - How to install suPHP or FastCGI php hander

Seems I'm having permissions issue with AWS Linux EC2. Specifically, I am migrating a Joomla site, and extension and core updates from Joomla Admin won't install because of Apache user/group ...
0
votes
1answer
343 views

PHP 5.4 packages are installed but the server is using PHP 5.3

I'm trying to upgrade PHP 5.3 to 5.4 on a CentOS 6.7 VPS. Followed the Webtatic instructions here: https://webtatic.com/packages/php54/ Now at a stage where the 5.4 packages are installed, but PHP 5....
0
votes
1answer
288 views

Apache with suPHP does not honor php_admin_value in vhost config

I just found out that overriding php.ini settings in the vhost configuration does not work on Apache with suPHP. The system is Ubuntu Server Edition 14.04 LTS and I installed Apache + PHP like this: ...
0
votes
1answer
42 views

What are the security implications of the below apache conf file

I have a situation where I want to share a codebase when accessing via a subdomain. sub1.example1.com shares sub1.example2.com Both example1.com and example2.com have there on virtual host file. I ...
3
votes
1answer
664 views

Setting default permissions on newly created files/folders [closed]

I have a network of sites where all sites share same "images" folder. I have created /home/_images/entities and symlinked it from all websites, and it works great with Apache, when I open /images/ on ...
1
vote
1answer
907 views

setting up suPHP with puppetlabs/apache on centos 6.5

I am trying to set up suPHP on a centos 6.5 box with the puppetlabs/apache module. Apache Configuration file { "/var/www/vhosts": ensure => "directory", owner => "root", ...
72
votes
1answer
94k views

Differences and dis/advanages between: Fast-CGI, CGI, Mod-PHP, SuPHP, PHP-FPM

There are few different php "wrappers"(?). What are differences between them? Tried to google some, but cant seem to find informations. (mod-php is not googleable). Why might I choose one over ...
1
vote
0answers
282 views

suPHP won't allow access to PHP sources

I am running suPHP with Apache2 and PHP5.4 on a Debian Wheezy. I found out that .phps files won't be showed and access will result in a 403 page. The same file with equal chmod/chown/chgrp will be ...
0
votes
1answer
262 views

Apache + SuPHP + hundreds of visitors + web uploading = CPU on its knees. Any idea other than Switch To NginX?

In certain conditions, a CMS brings my server on its knees (0% CPU left while the server load is never above 20% usually, officially from mysqld, tons of wait and tml in mysql, mysql's slow log ...
1
vote
1answer
369 views

Creating new users using PHP not recognized by Apache 2.4

I have a server setup where new linux users are created using (PHP) shell_exec ( '/usr/sbin/useradd ' . $username ); exec ('usermod -a -G ' . $username . ' '. $username); #add user into the usergroup ...
0
votes
1answer
2k views

Apache fast-cgi and php-fpm on Ubuntu 14.04 - Run PHP File as the owner

I am trying to setup FastCGI and PHP-FPM so that a php file can be executed as the owner of the file. I am trying to replace SuPHP with FastCGI and fpm. Earlier, I had folders with different owners ...
-2
votes
1answer
205 views

Why am I getting a save dialog box when I try to open phpmyadmin? [closed]

I got my apache2 server running and using suphp. I get a php test file to work at /var/www/html and at /home/usr/public_html. When I step into server/phpmyadmin I get a file save dialog box. The link ...
0
votes
1answer
197 views

Override PHP options with .htaccess, DSO works (suPHP doesn't)

I am using .htaccess in a sub directory as below: php_value apc.cache_by_default 0 But this throws an error, if i use DSO, then it works. I understand with suPHP I have to ovveride with a php.ini ...
1
vote
1answer
773 views

suPHP : proper use of the chroot feature

I started using suPHP recently, and I'm spending an amazing amount of time debugging the configurations and different compile options to get something that actually works. I've tried contacting the ...
2
votes
1answer
252 views

suPHP and Apache DBD : change GID only

(Note: if you're familiar with suPHP setups and want to skip the question's details, you'll find a quick explanation of what I'm trying to achieve at the end) I am currently setting up a machine to ...
1
vote
0answers
230 views

ChrootDirectory for SFTP user in virtual host directory with write permissions and SuPHP

I am trying to give a SFTP user (user2) writeable access to a virtual host directory (website) in /var/www/mywebsite under Ubuntu 12.04. I have setup sshd_config to use Chrooting so that this user (...
2
votes
1answer
3k views

Who or what is sending spam from my server ( CentOS / Apache / suPHP )

My server is sending lots of spam and I searched for the problem for hours now. After googling I found a forum where they talked about this and mentioned to dig into the exim log, so I did and found ...
4
votes
2answers
11k views

mod_security not actually blocking requests despite rule trigger & returning 403

I've pulled my finger out and installed mod_security to protect our WHMCS installation (a PHP based billing system) from some of the more obvious SQL injection attacks to try and minimise our ...
0
votes
1answer
130 views

Custom PHP.ini file

One of my clients is requesting register_globals to be turned on so his site can normally work. But I disabled custom php.ini files with suphp because of security issues. I must do this because of ...
0
votes
1answer
56 views

Limit Php.ini File Change Per User

I'm using suPHP with Apache 2 and users is allowed to use their own php.ini How can I limit changes of global php.ini values to only few modications? Thanks
0
votes
1answer
2k views

suphp error Directory / is not owned by admin

I'm trying to run a test phpinfo page from: /home/admin/testdomain.com But it displays such error: Internal Server Error Directory / is not owned by admin suPHP 0.7.1 My /etc/suphp.conf is like ...
0
votes
2answers
1k views

What happens when pid_max is reached

As the title suggests, what happens when pid_max (32bit standard is 32768) is reached with many zombie-processes? On our server a user generates a lot of suphp defunct zombie processes and this ...
0
votes
1answer
523 views

From suPHP to mod_php

I have a Centos6 64-bit server, Apache/2.2.15, PHP5.3.3, one IP and four name-based virtual hosts and SSL/SNI to provide https in addition to http. All those hosts are assigned to different linux ...
3
votes
1answer
4k views

Mod_ruid2 vs. SuPHP

I'm setting up a new server and I'm in doubt whether I install php/apache with SuPhp or mod_ruid2. I'd a lot of troubles with SuPHP before and it's definitely slower than mod_ruid2. But is mod_ruid2 ...
2
votes
1answer
2k views

Can you enable suphp to follow symlinks for the docroot?

I'm trying to clone a website into a user's home directory and symlink from my website folder to public_html. drwxrwxr-x 5 myuser myuser 4096 Dec 3 12:00 ./ drwxr-xr-x 4 myuser myuser 4096 Dec 3 11:...
5
votes
1answer
3k views

What is difference of PHP handler (CGI vs FastCGI vs Mod_PHP vs suPHP )?

I understand that there are four different PHP handlers out there (AFAIK). CGI (php-cgi) FastCGI (php-fpm) Mod_PHP suPHP I need to know the pros and cons of these handler and what environments ...
1
vote
2answers
294 views

Securing php on a shared apache

I'm going to install apache+php in a server where two users, A and B, will deploy their website. I'm trying to achieve isolation of users' space for security reasons: that is no scripts from site A ...
0
votes
1answer
2k views

500 error after installing su_php, permissions issues, “UID of script ”/index.php“ is smaller than min_uid”

I have just installed su_php on my server (amazon ec2 instance), It is required for 1 of my applications. Now, I am getting a 500 Internal server error when visiting all of my hosted sites. The ...
-1
votes
1answer
302 views

Files uploaded with php scripts are owned by apache on Directadmin [closed]

Uploaded files are owned by apache, I have DirectAdmin installed and also mod_suexec is loaded into Apache. So is there anyway to upload file with account owner under mod_php(php5_module)?
0
votes
1answer
407 views

Ubuntu with SuPHP and Wordpress - default perms of .htaccess file gives Apache 500 Error

Wordpress creates the .htaccess file with 600 file permissions (when permalinks are configured, etc.). I had to give it 655 before SuPHP would allow the homepage to load. I thought any files should be ...
1
vote
0answers
856 views

Suphp connection reset by peer in error logs

In my Linux server's logs I have this record nearly every 5 minutes. I couldn't find the reason for two weeks and I would be very happy if you can recommend me a way to diagnose the problem. It is ...
1
vote
1answer
757 views

Suphp and mod_fcgid on one server

Hi is it possible? My script not work with mod_fcgid, but work with suphp so I would like run one domain with suphp and other with mod_fcgid+xcache on one server. I don't want run every sites with ...
1
vote
2answers
1k views

Using SuPHP on a VPS

I am running a site with a WordPress CMS. I tried to install W3 Total Cache to speed up the site files, but I didn't know which opcode to pick (I am on a VPS), so I put a support ticket in with my ...
0
votes
1answer
5k views

CSF Log Watching

I run suphp so the uid of scripts is for the user not the webserver. My log files are also in /home/$user/logs/error.log CSF only monitors /var/log/apache2/error.log However because of my setup i ...
0
votes
2answers
587 views

Can i Run php5-suhosin with suPHP?

I currently run suPHP and have just installed php5-suhosin. Can I run them both together and if so where do I configure suhosin? As usually it is in the php5 ini file but suphp doesnt use that i dont ...
0
votes
1answer
2k views

500 internal error suphp [closed]

I'm using godaddy CentOS, Cpanle, suphp with easyapache and when i try to hit my php page i get 500 error and following lines in Apache log: [Fri Apr 20 04:23:48 2012] [error] [client 182.178.175....
3
votes
1answer
2k views

How do I change permissions and ownership after git-pull, to match folder?

The company I work for is using Git for deployment and because of this it overwrites specific permissions and ownerships. What is the best way to make sure that the folder ownerships and permissions ...
2
votes
1answer
866 views

Least, secure and enough permissions for public_html and folders and files under public_html using SuPHP for shared hosting environment

I have a server with SuPHP and DirectAdmin. Many (but not ALL) of my users are running Joomla and Wordpress. Will it make a problem if I chmod public_html and sub-folders to 700? Will they NEED more ...
0
votes
1answer
202 views

Adding a Python handler in suPHP?

I have the PHP handler working perfectly fine, but one of my friends would like to use Python as well. I have Python installed on my server at /usr/bin/python2 (for Python2) as well as /usr/bin/python ...
2
votes
2answers
691 views

Centos Suphp , How do I get Alias with Phpmyadmin working

I have configured my CentOS installation with Apache with suPHP. It works very well. But when I install PHPMyAdmin I get a permissions problem. Because PHPMyAdmin is located under /usr/share/...
1
vote
2answers
891 views

php scripts are running under apache uid [closed]

I have a vps, running directadmin with apache 2 and php 5. It all worked fine, until today, since i discovered that PHP scripts are executed under apache:apache, and not under file's owner uid. This ...
0
votes
1answer
4k views

Mismatch between target UID (99) and UID (XX) of file

I'm kind of a server noob. I'm just running httpd server which uses Nobody as the owner of the processes. My php files are chmod as 755 with ownership as Apache:Apache. It triggers this error ...
0
votes
1answer
1k views

Apache, suPHP, CentOS. Memory limit being hit by gd, but memory limit is set much higher than when it dies

We have a server that's handling uploads. The memory limit is set at a ridiculously high level in php.ini (800 M).. however we have gd, which is managing the image resizing, but it is dying at about ...
0
votes
1answer
134 views

Restrict web access above a given directory (Apache 2.0 & suPHP)

How do I restrict web access to parent folders of the main website directory. For example if I have the following directories/files: / ├── home │   └── user │   │   ├── img.png │   │   ├── script.js │...
1
vote
2answers
641 views

Using /home folder for website (under Apache2.0 and suPHP)

Using suPHP my goal is to have my website point to my /home folder and every user within the home folder have their own index.html page. I don't currently have an index.html page in my /home folder, ...
0
votes
1answer
3k views

suPHP permission requirements for all files or only PHP scripts?

Generally with PHP, files/folders have a permission of 0777 when we want to write to them. suPHP forbids a permission of 0777. Instead, files are supposed to have a permission of 0644 and folders have ...
0
votes
2answers
3k views

Am I running PHP or suPHP

I am testing to see if I am running PHP or suPHP. when I issue phpinfo() I get back over 600 lines of data. The only mention of suPHP occurs here <tr><td class="e">Loaded Modules </td&...
0
votes
1answer
1k views

How to switch from CGI/FastCGI Server API to DSO?

Apache: How to switch from CGI/FastCGI Server API to DSO? I want to switch back and forth. I found this answer for the reverse step, but I need the the first part: Apache: How to switch to CGI/...