Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Safe mod off security

[NameSniper]

I was wondering what can make a server or at least the domain level security better in case a php script has an exploit,will turning safe mod on help to secure the rest of the server if someone hack that script ?

Someone said that php scripts are different from cgi ones and that if someone manage to exploit the php script he can do anything he want with the privileges of the apache user and that safe mod on will help in this case,is it true ?

[Steven]

Safemode on will provide better security then safe mode off.

[ServerNinja]

Turning on safe mod is not a professional way to approach problems. It can cause a lot of security issues to the server.

[NameSniper]

Steven i meant safe mod on and misstyped it with off..

Linuxcares then what is more professional way to secure the server if you are unsare whether your script has an exploit ?

[ServerNinja]

Using open_basedir with apache, using disable_functions etc. are some of the methods to secure. See http://in2.php.net/features.safe-mode for more informations.

[NameSniper]

Thanks linuxcares

[ServerNinja]

You are welcome