I'm running a shared hosting environment and I'd like to know if it's even possible to secure the Apache while it's running mod_php. I know I could go suPHP with PHP-CGI, but that'd increase drastically the server load.
So what should I do to best secure the server?
So far now I did:
- Apache: Installed mod_security and mod_evasive.
- PHP: Set register_globals=OFF Set disable_functions = ini_restore, popen, exec, shell_exec, system, passthru, proc_open, proc_close Set safemode=ON Set open_basedir to user's directory on virtualhost
Is that would be a secure environment for my users?
I am getting the error "max_user_connections exceeded" for database user "xxxx". So every time this happens I have to feed a new database admin login to my script. There is nothing wrong with the script since it is very popular membership script. I think my host just allows low number of "max_user_connections". please advice me on a host that allows higher number of "max_user_connections"
Does anyone know of any shared hosting plans that don't have any MySQL limitations? Aplus.net and Powweb are trying to shut down my accounts because of this problem, and I can't afford dedicated hosting quite yet.
I'm going to be rolling out a php/mysql driven site soon and I'm pretty much resigned to the fact that the mysql performance dreamhost has given me isn't going to cut it, its probably too oversold. Simple one table one column selects can take 30 seconds or time out depending on how badly the server is being hammered. HTTP requests are usually snappy, but the mysql performance is bogus.
What is a good host for me to launch this site with? Storage wouldn't need to be too terribly high, at least initially. I'm tempted by MediaTemple's slick marketing, but I've seen on here that some people have had poor sql performance (contrary to what some personal friends have experienced, so I'm torn). I was reading about downtownhost on here, but their load times seemed slow when I hit a couple domains listed on here that are hosted by them.
This host needs to be located in the US. Honestly, I like dreamhost and their panel, save for the sql sluggishness I'm getting.
I'm running SQL 2005 in my hosting environment, and plan on offering as part of my plans.
The one issue I'm having is any user can view all the databases. My main issue is I need to store client information (sorry, I only can afford one server) into the database. Basically I'm creating *all* the backend panels, management, etc in ASPNET/C#.
The database will have FTP, email, payment, etc stored it in. Should I hold off and only offer mySQL? I DO NOT want the users seeing my databases like that. They can't access them, but still. I don't know what Microsoft was thinking!
I was thinking about developing my own SQL Manager where you could execute scripts, edit/create tables, and do everything you needed right inside of your webbrowser. This is, of course, a lot of work when you can do it easily in SQL Manager express. I imagine my way would be easier since I could make a list of blocked commands, run a check on the commands the user is executing, and block them.
By the way, I'm running Windows 2008 x64 w/IIS7 and the entire panel will be custom made by me and two other programmers, with me being the lead developer.
my friend and i are working on some web-based-commerce ideas and at current we're at godaddy.com. i can only imagine the vitriol they've rightfully earned here, as we decided to be done with them when the $30 SSL license they told us we could get one night quickly became $78 because there was a new "turboSSL server" package we needed, nevermind the guy the first time said with our hosting options we only needed to go through them for the SSL license, so basically, either the first guy lied to us or the second guy tried to hustle us, either way, i dont like companies whose sales model is revealed like the plot in a horror movie, so we're looking to go elsewhere.
basically we're looking for a virtual private server setup, although actually another question i'd love to ask someone is if joomla is better served on unix/linux or windows, with a few dozen accounts needed, and by accounts i mean domains and whatnot, as right now it's basically the blanket idea that you grab the names you need, or might go to if you change your mind on company names...
so basically, with all the people here talking about bad experiences with places, are there any good experience type places where someone can get competent tech support, no hustling in sales pitches, and quality service at a nice solid price?
again, sorry to show up and start asking for things, but i'm not necessarily well versed in these arts yet... rest assured once i have some information i shall contribute to the community and help others who are in my position now
I've had my account less than 2 months. In that time, my account was actually usable, a couple of weeks. I've now been waiting for a resolution to the "Out of Space" errors for nearly 7 days. The most recent communication was this morning (one of only two responses in 7 days) stating that he would "try moving your account to a newer server. I should have another update later today." It has been 6 hours since that message and still no resolution.
BQ has a very good reputation around here. So, I was very hopeful that they would live up to that reputation. However, 7 days to resolve an issue doesn't seem all too responsive to me. Apparently, I'm not the only one who has experienced this same problem of delayed responses and slow resolution.
I recently took over as webmaster for my employer. We want to move to a CMS (Wordpress) for our site. We've had a shared account with Tera-Byte for years. I go to install Wordpress and it says it needs MYSQL version 4 of greater.
Tech support is willing to move me on to a newer server that has MYSQL 4, but doing so would mean copying everything over and reconfiguring anything that needs to be reconfigured (i.e., all our staff's email accounts) from scratch. Is this standard practice?
I keep getting this error once in a while for my forum.
SQL ERROR [ mysql4 ]
User xxxxx_xxxx has already more than 'max_user_connections' active connections 
An sql error occurred while fetching this page. Please contact an administrator if this problem persists.
I've contact support team from my Hosting provider and they have help me to increase the value of max_user_connection to 50. I have made to understand by them that this problem can be resolved by using VPS or Dedicated server. As a newbie, I just want some assurance would the problem permanently resolve if I'm using VPS or Dedicated server? Which one should I use? VPS or dedicated server?
I've checked the average page download time that the Googlebot reports in Google Webmaster Tools and, from what I've seen elsewhere, I think the number is good -- less than 200 milliseconds. However, my pages are compressed and small (>1.5K). This gives me a download time of ~7500 bytes/sec for the Googlebot.
what kind of page download speeds do others get with Googlebot? What's typical/good/bad?
I believe there is a gap in my understanding of VPS with regards to just how much control you really have over the system. VPS gives you "root access" which typically means top-level access... but in reality, the true super user is a boot-up console user. Few VPS providers that I've investigated offer console access to your VPS while booting.
What, than, can be done about system upgrades or using advanced features like root filesystem encryption? Say, for instance, that my provider offers openSUSE 10.1 and I want 10.2. I would be loath to do such a thing if I can't reboot and watch things as it goes. What if the upgrade failed and you need to drop to a single-user mode to fix it?
Or maybe my real misunderstanding here is that you can't upgrade a system in a VPS if the provider doesn't offer the upgrade?
And what if I want my entire system (other than a boot partition) to be encrypted. This would include an encrypted root and swap. This also requires a password at bootup well before any services (like sshd) start.
Again, maybe the real answer is that I can't do that at all anyway and so it doesn't matter.
i am having an website like a webdirectory. BUT i am getting this error after every 5-10 mintues :
Warning: mysql_pconnect() [function.mysql-pconnect]: User USERNAME has already more than 'max_user_connections' active connections in /FIELPATH on line 93 Database error: pconnect(localhost,bstitne_netclass, $Password)failed. MySQL Error) Session halted.
PLEASE suggest how can i solve this. May be it is an server issue
Since moving over to a new server, I have had to reboot my sql server about 5 times a day due to it crashing, and I always get the error:
Warning: mysql_connect() [function.mysql-connect]: User food_user has already more than 'max_user_connections' active connections in /home/food/public_html/includes/functions.php on line 9 Not connected : User food_user has already more than 'max_user_connections' active connections
I dont understand what is causing this...I used the tweaking guide as found on here and my.cnf file looks like this:
Through my WHM, i went to "Show Mysql Processes" and heres what it displays www.brinked.com/mysql.txt
This problem has also occured on another one of my websites on the same server that makes use of mysql. Am I doing something wrong here? I dont think its the script because it ran for years on another server just fine.
I have purchased a dedicated server because my existing host gives me a database error during high traffic. the error is
"Cannot connect to MySQL: User admin0506 has already more than 'max_user_connections' active connections"
Now in my dedicated server I have root access and a Plesk control panel with admin access. I have created a database but I don't know how to change the parameter "max_user_connections". Please help me because I am loosing lot of business due to this issue.
I'm trying to find at least three web hosting companies to choose from to host a Joomla websites on a shared server. Would consider dedicated if the deal was right. I have a friend of mine who wants to create a church website, and is looking for the best deal. I use Netfirms which I have never had an issue with, but I didn't want to be bias, and would like give him other options to choose from.
Is there a good WebHosting Review site, I could check out, or maybe someone could recommend their top three. I reading threw the forums here and I noticed there are not that many complaints with Hostgator. Again, I just want to see if there was anything out there better.
I've taken the scalable approach when it comes to servers for my various sites. With shared servers, I never really worried about backup or even hard drives going down. Same goes for VPS. For some reason, when I moved to dedicated servers, I outfitted them with 74GB SATA drives in a RAID setup. My understanding is that it protects me if one drive happens to fail. I've been lucky and haven't had that problem.
I'm at the point now where I'm looking to upgrade from a VPS paying around $75 per month to a dedicated server. I can stand to be down a day if a hard drive goes, if it means $75 a month in savings. My biggest concern would be suggestions on the best way to protect myself in the event of a catastrophe.
Contacted SoftLayer about possibly adding a second server for me and honoring the price I'm paying on my old server.
Finally, both the old and new site are seeing roughly 3,000 visits per day. The server I'm considering is a Clovertown 5320 1.86 dual quadcore, 4GB RAM, RAID, 2 74GB Cheetah drives,100mbps, 2000GB bandwidth. Is this overkill or the right server for the job?