FastCgi Or SuPHP
Apr 1, 2009what do you prefer?
fastcgi or suphp?
which one is better with suexec (in security and resource usage)?
what do you prefer?
fastcgi or suphp?
which one is better with suexec (in security and resource usage)?
I installed FastCGI and configured it via fcgiconfig.js using this command
cscript fcgiconfig.js -add -section:"PHP" -extension:php -path:"C:PHPphp-cgi.exe"
It configured fcgiext.ini and added the .php extension to the sites and what not.
When accessing a php script, I get the following error though:
FastCGI Error
The FastCGI Handler was unable to process the request.
Error Details:The FastCGI process exited unexpectedly
Error Number: -2147467259 (0x80004005).
Error Description: Unspecified error
HTTP Error 500 - Server Error.
Internet Information Services (IIS)
I did not do anything special with the PHP. It is the zip 5.2.5 from the site. I configured php.ini and move it to c:/windows. I granted IUSR permission on php-cgi.exe
Am I missing something? I followed the guide here
Windows 2003 / IIS6 / PHP 5.2.5
I already have php successfully compiled as apache modules but not the fastCGI version, i just trying to compile with the following setting, but weird, could not get the php-cgi binary out of it, only the apache module :
./configure --prefix=/usr/local/apache2/php --with-config-file-path=/usr/local/apache2/php --enable-wddx --enable-trans-sid --enable-dio --enable-sysvsem --enable-mbstring --enable-ftp --enable-versioning --enable-force-cgi-redirect --enable-so --enable-inline-optimization --enable-bcmath --enable-calendar --enable-memory-limit --enable-sockets --enable-track-vars --with-apxs2=/usr/local/apache2/bin/apxs --with-zlib=/usr --with-xmlrpcb --with-gettext --with-xml --with-dom --with-dom-xslt --with-dom-exslt --with-openssl --with-bz2 --with-jpeg-dir=/usr --with-png-dir=/usr --with-iconv=/usr/local --with-curl --with-mysql-dir=/usr/local/mysql --with-pear --with-readline --with-gd --with-freetype2=/usr/include/freetype2/freetype --with-freetype-dir --enable-gd-imgstrttf --enable-gd-native-tt --enable-fastcgi --disable-debug
I was wondering whether anyone can help me, I'm having some major performance problems running PHP on IIS using Shane Caraveo's php_fcgi.dll
PHP: 5.1.1.
IIS: 6
Basically I'm getting to the point where the isapi requests jump rapidly to 400+ requests from a meagre 2 -5 requests. Given the high number of requests this is essentially bringing the server to a standstill.
Does anyone have any ideas how I can begin getting to the bottom of this either through network monitoring or application debugging?
installing PHP fastcgi on my Centos VPS. I have already Googled for this and tried most of the tutorials but nothing seems to work.
I have already compiled PHP with --enabled-fastcgi. What I ca't figure out is what to put in my .htaccess file.
Almost every tutorial on this compes up with a different way and none of these seem to work for me.
I use "suphp" on 3 servers I own with apache 2.2.6 and suddenly yesterday (15 hours ago) one of the servers show "Internal server error" on all sites.
Tried rebuilding apache and php 4 times with no fix until I came to try handling php with cgi instead. (I always like to track who is using apache processes)
well. getting to this fix was after 10 hours of all sites not working on the server.
now (5 minutes ago) I go to http://www.suphp.org to read their docs for solution to find this
Quote:
Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.
Please contact the server administrator, hostmaster@marsching.com and inform them of the time the error occurred, and anything you might have done that may have caused the error.
More information about this error may be available in the server error log.
Apache Server at www.suphp.org Port 80
Why did this suddenly arise while No changes were done on server software or config?
I believe this happens after the first coming apache restart or something but dunno what was the reason yet
maybe suphp.org guys have to update us when their site comes back online
I'm looking at optimizing our dynamic content delivery process and there are some interesting claims regarding fastcgi vs. mod_php.
What I am wondering about is assuming apache serving ONLY php content, why would fastcgi perform any better than mod_php? The memory footprint of spawned workers exists in both solutions.
Wouldn't context switches and buffering in fastcgi actually lower performance?
What could be gained by using a different web server (nginx/lighty) ? The primary bottleneck would still be physical memory (assuming <255 workers) ?
Should we not be using PHPSuExec with FastCGI?
View 1 Replies View Relatedi'm using fastcgi for PHP app. i have 5 sites on my server but fastcgi works only one site which is the first opened if you open second site iis give me error like "HTTP Error 500.0 - Internal Server Error
C:PHPphp-cgi.exe - The FastCGI process exited unexpectedly". i restart iis and open another site firstly it works but again another site give me error.
I've already posted this over at the vBulletin forums and with their tech support team, but so far no one has been able to find a solution. Someone suggested I post here as well.
I am currently running vB using PHP 4.3.9 with Zend WinEnabler on a windows 2003 server. I have a seperate database server and a web server. This current configuration works fine, but I am moving to an upgraded web server and this is where the problems start.
Due to intermitant issues with Zend WinEnabler (now a discontinued product) I wanted to move to the latest version of PHP (5.2.5 NTS) and Microsoft FastCGI. The problem is that I am getting blank pages when clicking the Today's Post link from the top menu and immediately following the submission of a new post. I've gone through all of the vBulletin listed suggestions about trouble shooting blank pages and none apply.
Because I have a seperate database sever, I am accessing the same database with the new server vB configuration I am migrating to. As such I suspect the issue has to be related to web server given there are no issues on the current live site and the only changes are the PHP version and acceleration app.
If anyone has some suggestions, please let me know. I am running out of time on my server migration window before I am going to be billed for two servers.
I try to enable register globals for a specific domain using htscanner and .htaccess (php runs as fastcgi). My phpinfo page says that register globals are On but they don't work.
View 1 Replies View Relatedwe have installed suPHP along with suhosin on server to prevent upload of illegal scripts but still we are having problems with scripts used for phishing web sites! We have a lot of Joomla users and other php apps installed on server.
View 5 Replies View Relatedi have many problem from this
i want to remove it
i had recompiled apache without it but it still working
I have a Linux server for shared hosting in which I am using Cpanel/WHM. I have PHP running as suPHP which I believe is for security. The problem I am facing is a lot of PHP based websites create load on the server and consume as much as 10% of the CPU and sometimes some script even consumes 50% CPU. I think I can reduce the load caused by the PHP scripts by installing eAccelerator. However, it does not work with PHP running as suPHP. Can anybody tell me which one should I choose of the both? Is there any other way to reduce the load on the server?
View 14 Replies View Relatedwhat are suexec / suphp and for what purpose we use it.
View 1 Replies View Relatedwe are try SuPhp on Cpanel server but seem that is use a lot of resource, on 2 X quad core server we can't add more than 300 domains for server, whic configuration do u use? any alternative solution?
View 7 Replies View Relatedsomebody suphp?
What is your advice?
I'm wondering which one is the best with cPanel and Apache 1.3.41. The server will be used for shared hosting.
View 11 Replies View RelatedI wanted to ask an advice which php handler is the most secure to have on a shared server:
dso vs cgi vs SuPHP
I currently have dso with Suexec on and few accounts are getting phishing sites uploaded so I read that SuPHP is safer. What do you recommend?
If I do change the server to SuPHP should I enable Suexec as well in the whm: Configure Suexec and PHP?
i have install suhosin and i want to know that should i install suphp too?
and
do you recomend me to install suphp?
Just moved to a 1and1 managed server in which FastCGI is enabled.
But I'm having problems getting Movable Type to run under fastcgi - which has never been a problem before, even on shared hosts.
Is there a 'hello world'-type test for fastcgi - so I can check if it is enabled?
I have just switched from mod_php to fastcgi + suexec, but now trying to use the ab command times out :
ab -n 10000 -c 100 [url]
This is ApacheBench, Version 2.0.40-dev <$Revision: 1.146 $> apache-2.0
Copyright 1996 Adam Twiss, Zeus Technology Ltd, [url]
Copyright 2006 The Apache Software Foundation, [url]
Benchmarking www.example.com (be patient)
Completed 1000 requests
Completed 2000 requests
Completed 3000 requests
Completed 4000 requests
Completed 5000 requests
Completed 6000 requests
Completed 7000 requests
apr_poll: The timeout specified has expired (70007)
Total of 7422 requests completed
Then I get a bunch of emails from LFD ....
I recently changed one of my development servers from suPHP to FastCGI. I will admit, FastCGI is much quicker at PHP page generation and the system seems much more responsive.
However, I am looking into how FastCGI differs from suPHP in terms of security. Both run as a form of CGI outside of Apache itself -- which in theory is more secure. However, suPHP prevented users from setting insecure permissions (for instance, the max for files was 644, and for folders it was 755) -- something which FastCGI does not appear to do (although it could due to how it runs as a user).
Does anyone have any comments on this? Is there a way to force these same restrictions via FastCGI?
Also, any other comments in regards to the security of FastCGI vs. suPHP? I have run numerous searches and I don't seem to be able to find much. Google just returns a bunch of providers whose 'customers' are celebrating due to the provider choosing to implement FastCGI.
I have a server running Apache 2 with PHP as an Apache module. There are a few php scripts that use lots of cpu when they run and have lots of hits, but Apache is still running fine and pages and php scripts load pretty fast. I was just wondering if running PHP as fastcgi would use less cpu or make php scripts load faster.
View 0 Replies View RelatedI have just installed my vps with webmin on debian 5 and I need a guide to how to configure my system to use suphp, Ive googled it but not come back with any clear guide.
I better add Ive plunged in at the deepend and after the secuity breach at Vaserv, I can not take the easy option and install lxadmin any longer.
I'm running a dedicated server (ie my site only) which is primarily a vbulletin powered site.
I was wondering if it is beneficial in running PHP as suPHP along with suhosin?
A lot of articles I see seem to be aimed at shared setups where there are other users with various (possibly) untrusted scripts.
It is a WHM/cPanel managed server which by default is set to run PHP5 as DSO (Apache module).
suexec is installed however this only affect CGI scripts correct?
I recently had a (paid) security audit completed and I asked the question about suhosin. The reply I got was:
Quote:
You do not need suhosin as you do not run suPHP we enforce posix acl's which will prevent vulnerable scripts from being able to download to the system easily and prevent the automated attacks. You can try this by installing a phpshell and you will see it's not very effective, only php functions are really of any use (such as readfile() and so on) but it will prevent things like wget xxx.
Should I recompile Apache (via EasyApache) with suPHP and suhosin or just leave as is?
my server is centos and cpanel,
i setup it with suphp and suEXEC,
and i set the register_globals as off on server,
now,i had a website need register_globals on,
i search many articles and try to edit php.ini and .htaccess,
but all still show
FATAL ERROR: register_globals is disabled in php.ini, please enable it!
or
500 internal error
could anyone teach me how to solve the issue?
suphp and spent the better part of the day configuring a new server and then upgrading it to suphp in preparation for a migration next week.
However, I broke the links to var/www/html in the process and I don't know at what point it broke to know how to fix it.
I have a couple of links that usually work to this directory:
lax.powermonster.net/test.bin
and
[url]
Both of which now come up to a 404 error from my main site: powermonster.net.
I am setting up a shared Server with apache2 and php5 + suhosin +suPHP + vsftpd.
The Directory Structure is:
1. DocumentRoot
/var/www/virtual/website1
/var/www/virtual/website2
/var/www/virtual/website3
............etc
2. For each website I would create a system account and tie it to each virutal host(as required by suPHP)
chown -R John:group1 /var/www/virtual/website1
chown -R Mary:group1 /var/www/virtual/website2
chown -R Ben:group1 /var/www/virtual/website3
...........etc
<VirtualHost 192.168.100.44>
DocumentRoot /var/www/virtual/website1
ServerName www.website1.com
suPHP_UserGroup John group1
</VirtualHost>
<VirtualHost 192.168.100.45>
DocumentRoot /var/www/virtual/website2
ServerName www.website2.com
suPHP_UserGroup Mary group1
</VirtualHost>
........etc
3. I setup vsftpd with chroot to each virtual host.
This works very nice as long as each client has only one ftp account. But if a client(website1) wants to have multiple ftp accounts( ex. john, john100, john200), they would mess up the file ownership when they upload and change files. Since suPHP executes PHP scripts with the permissions of their owners (suPHP_UserGroup John group1, suPHP would complain their setid is mismatched because the John100 is not the suPHP_USERGROUP owner(John). I have tried Virtual Hosting with Vsftpd and Mysql, that didn't work because all the virutal users would be acting as one user (guest_username=virtualftp) when they upload and change files. I am wondering if there is ways to allow multiple ftp accounts for each Virutal host working together with suPHP. Or It is possible for ftp user to change ownership once they log in.