PHPSuExec Or Mod SuPHP
Mar 18, 2008I'm wondering which one is the best with cPanel and Apache 1.3.41. The server will be used for shared hosting.
View 11 RepliesI'm wondering which one is the best with cPanel and Apache 1.3.41. The server will be used for shared hosting.
View 11 RepliesMy server has update to
WHM 11.11.0 cPanel 11.15.0-R17665
CENTOS Enterprise 5 i686 on standard - WHM X v3.1.0
apache 1.3.37
and now the server run without phpsuexec so i try to recompile apache with php security and suphp module but the php.ini files still didn't work in the client's sites and there is alot of scripts want php.ini files for safemode = off , etc even the top process show me nobody not users to know who spam or other tings
i run this command
/usr/local/cpanel/bin/rebuild_phpconf --current
and i got
php has not yet been configured with EA3
with the new update cpanel i can't run php.ini files anymore
As all we know suPHP or phpsuexec are coded to let apache run the script with file's owners name and not the "nobody"
1- Plesk does not support phpsuexec but its possible to setup suPHP on plesk! Any comment, suggestion experience?
2-My alternative
I create a group for each single user named "apacheUSERNAME" and will assign both apache and the user to this group.
Then I will change the group for any file/directory that needs 777 permission.But instead 775.
Again suggestions are appreciated
3-Final comparator should be server load; How will be the server performance(load) with or without suPHP or phpsuexec
i wanna to install phpsuexec but i know that i will have problems with .htaccess files.
if i install phpsuexec how can i avoid the 500 error from the .htaccess?
Should we not be using PHPSuExec with FastCGI?
View 1 Replies View Relatedi have a server run with phpsuexec and php4 default,
i want to let certain account run with php5,
it looks likely i can add a php.ini in the account,
"how to install/setup phpsuexec" specially in Cpanel/WHM servers.
View 1 Replies View RelatedSearching a while I learn that phpsuexec is not native in Plesk. But it's years or months ago. I'd like to know if now is there any easy way to install phpsuexec (or any alternative: suexec, suphp...) in Plesk?
I have a VPS with Virtuozoo and Plesk, and it could be better if scripts run with owner's permissions. There're 2-3 users on the VPS and I don't want to config Apache to run with special user apart from nobody.
Can anyone tell me the difference between SuExec and PHPSuExec. I hear eaccelerator will not work with PHPSuExec but will it work with SuExec?
View 2 Replies View Relatedwhat is phpsuexec and suexec and how to stop them ?
View 1 Replies View Relatedfor servers to have PHPsusexec enabled or not? Is it advisable?
Btw I know Apache has the phpsu module. Is it similiar to PHPsuexec? if i didn't compile Apache with that module, does it means when i enable PHPsuexec through cPanel, it won't work?
I was wondering if it is the script problem or the settings problem. I have a script that upload and create files, however it always have things created (eg. folders) in nobody's group and owner. However when I do it in FTP, the permission was set to the user's. Can anyone advise what problem it is?
What's the simplest way to switch over to phpsuexec on a cpanel box, a smooth transition for all domains hosted? Basically, after I complile apqache (via whm preferrably) with phpsuexec and the current (php 5 / apache 2.2) do I need to do anything else, run any commands? I did this in the past, but cannot remember the exact steps.
View 1 Replies View Relatedis there anything I should do now?
everthing generally seems fines but I have a strange thing going on with an images folder that a php script puts users images in (so my users can upload files). this folder was previously 777 and now phpexec has been installed the images are not showing up. I get a "You don't have permission to access" message on the image files. I tried chmod'ing the images folder to 766 and 755 and the same thing happens. This has nothing to do with the php script as I can't even access the image files by typing in the URL in a browser.
I am running Joomla on a server and am trying to get phpsuexec to work with it, so far without success. From searching the web and forums I managed to get rid onf my 403 and 500 errors, but now I am dealing with blank white pages on all of my sites where the page being loaded is a php file.
I have all of my php calls removed from .htaccess and put into a php.ini file.
What else am I missing here? Is there a conflict in my apache build maybe?
We have a strange issue where include('./somebadfilepath.txt');
Will not output the standard WARNING from PHP. Instead it just displays a blank page.
phpsuexec is installed.
This also happens for other functions like fopen or fopen when supplied a URL path. No error,
We have a server that we just changed over to PHPSUEXEC. On this server, we have a large IPB (Invision Power Board) forum that we have not been able to get uploads in the forum back working again. Users are getting the message that they don't have permission, and to contact an administrator.
I have looked on IPB's forum for PHPSUEXEC related issues, but can't find a solution. Of couse, before phpsuexec the "upload" folder had 777 file permissions, but under phpsuexec this must be 755. It isn't working though.
Anyone had experience with this with IPB and know how to fix it?
Does anyone know the step by step procedure for compiling apache with phpsuexec enabled and making apache recognize php on a non-cpanel server?
View 0 Replies View RelatedI use "suphp" on 3 servers I own with apache 2.2.6 and suddenly yesterday (15 hours ago) one of the servers show "Internal server error" on all sites.
Tried rebuilding apache and php 4 times with no fix until I came to try handling php with cgi instead. (I always like to track who is using apache processes)
well. getting to this fix was after 10 hours of all sites not working on the server.
now (5 minutes ago) I go to http://www.suphp.org to read their docs for solution to find this
Quote:
Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.
Please contact the server administrator, hostmaster@marsching.com and inform them of the time the error occurred, and anything you might have done that may have caused the error.
More information about this error may be available in the server error log.
Apache Server at www.suphp.org Port 80
Why did this suddenly arise while No changes were done on server software or config?
I believe this happens after the first coming apache restart or something but dunno what was the reason yet
maybe suphp.org guys have to update us when their site comes back online
what do you prefer?
fastcgi or suphp?
which one is better with suexec (in security and resource usage)?
we have installed suPHP along with suhosin on server to prevent upload of illegal scripts but still we are having problems with scripts used for phishing web sites! We have a lot of Joomla users and other php apps installed on server.
View 5 Replies View Relatedi have many problem from this
i want to remove it
i had recompiled apache without it but it still working
I have a Linux server for shared hosting in which I am using Cpanel/WHM. I have PHP running as suPHP which I believe is for security. The problem I am facing is a lot of PHP based websites create load on the server and consume as much as 10% of the CPU and sometimes some script even consumes 50% CPU. I think I can reduce the load caused by the PHP scripts by installing eAccelerator. However, it does not work with PHP running as suPHP. Can anybody tell me which one should I choose of the both? Is there any other way to reduce the load on the server?
View 14 Replies View Relatedwhat are suexec / suphp and for what purpose we use it.
View 1 Replies View Relatedwe are try SuPhp on Cpanel server but seem that is use a lot of resource, on 2 X quad core server we can't add more than 300 domains for server, whic configuration do u use? any alternative solution?
View 7 Replies View Relatedsomebody suphp?
What is your advice?
I wanted to ask an advice which php handler is the most secure to have on a shared server:
dso vs cgi vs SuPHP
I currently have dso with Suexec on and few accounts are getting phishing sites uploaded so I read that SuPHP is safer. What do you recommend?
If I do change the server to SuPHP should I enable Suexec as well in the whm: Configure Suexec and PHP?
i have install suhosin and i want to know that should i install suphp too?
and
do you recomend me to install suphp?
I have just installed my vps with webmin on debian 5 and I need a guide to how to configure my system to use suphp, Ive googled it but not come back with any clear guide.
I better add Ive plunged in at the deepend and after the secuity breach at Vaserv, I can not take the easy option and install lxadmin any longer.
I'm running a dedicated server (ie my site only) which is primarily a vbulletin powered site.
I was wondering if it is beneficial in running PHP as suPHP along with suhosin?
A lot of articles I see seem to be aimed at shared setups where there are other users with various (possibly) untrusted scripts.
It is a WHM/cPanel managed server which by default is set to run PHP5 as DSO (Apache module).
suexec is installed however this only affect CGI scripts correct?
I recently had a (paid) security audit completed and I asked the question about suhosin. The reply I got was:
Quote:
You do not need suhosin as you do not run suPHP we enforce posix acl's which will prevent vulnerable scripts from being able to download to the system easily and prevent the automated attacks. You can try this by installing a phpshell and you will see it's not very effective, only php functions are really of any use (such as readfile() and so on) but it will prevent things like wget xxx.
Should I recompile Apache (via EasyApache) with suPHP and suhosin or just leave as is?
my server is centos and cpanel,
i setup it with suphp and suEXEC,
and i set the register_globals as off on server,
now,i had a website need register_globals on,
i search many articles and try to edit php.ini and .htaccess,
but all still show
FATAL ERROR: register_globals is disabled in php.ini, please enable it!
or
500 internal error
could anyone teach me how to solve the issue?
suphp and spent the better part of the day configuring a new server and then upgrading it to suphp in preparation for a migration next week.
However, I broke the links to var/www/html in the process and I don't know at what point it broke to know how to fix it.
I have a couple of links that usually work to this directory:
lax.powermonster.net/test.bin
and
[url]
Both of which now come up to a 404 error from my main site: powermonster.net.