Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Shared server with mod_php

[Evolver]

I decided to stick with mod_php for my shared server. What I'm looking for is any info/links on best security implementations for mod_php.

Thanks

[david510]

You may check this link.

http://www.faqs.org/docs/apache-compile/php.html

[Lightwave]

Not sure what the above link has to do with hardening php... :p

You should carefully go through info @ http://www.hardened-php.net/
and understand the benefits and problems you'll experience.

[Patrick]

Originally Posted by david510

You may check this link.

http://www.faqs.org/docs/apache-compile/php.html

If you're going to just post a link to get your post count up, why don't you post something useful for once?

[Evolver]

Originally Posted by Lightwave

Not sure what the above link has to do with hardening php... :p

You should carefully go through info @ http://www.hardened-php.net/
and understand the benefits and problems you'll experience.

I had Suhosin installed yesterday and was going to setup open_basedir for each domain and use Suhosin to control disable_functions per domain. Although after doing some reading giving customers acess to use cgi removes any security since then any cgi/perl script can still be used for cross site reading/hacking on files with 777.