SuExec Effect?
Sep 26, 2007I want to ask about suexec.
Currently I disable suexec in my dedicated server.
Which is better, to enable it or not?
What will happen to existing sites folder permissions if suexec is turned on?
I want to ask about suexec.
Currently I disable suexec in my dedicated server.
Which is better, to enable it or not?
What will happen to existing sites folder permissions if suexec is turned on?
Do you have any idea for patch PHP suEXEC with "ln" command?
View 9 Replies View Relatedwhat fellow users here set --with-suexec-docroot in Apache
installations when cgi-bin folder is outside the public_html folder.
Looks like setting it to /home is the only way.
I installed lsws without apache conf file(httpd.conf). Then I created a new virtual host in "suEXEC" Template. I added a new user via SSH and made home dir for him and chowned his home dir + all his files to hisusername:hisusername. His home dir(/home/user/) is chmoded to 755 and his /public_html to 711. It worked fine but after that I installed phpbb3 forum and when I tried to chmod config.php to 600 I got an error on the forum:
Fatal error: require() [function.require]: Failed opening required './config.php' (include_path='.:/usr/local/lib/php') in /home/username/public_html/common.php on line 127
When I was using lsws with apache conf file and I had configured suEXEC + suPHP for apache I was able to chmod config file to 600 and it worked fine. I have no idea what could be the problem now.
It works fine when I chmod config.php to 755 but for security reasons I would need a way to configure it to 600.
LiteSpeed si running as nobody:nobody.
EX. APP settings:
LSAPI App
$VH_NAME_lsphp
uds://tmp/lshttpd/$VH_NAME_lsphp.sock
SCRIPT HANDLER settings:
Suffix: php5
Type: LiteSpeed API
Name: [VHost Level]: $VH_NAME_lsphp
what are suexec / suphp and for what purpose we use it.
View 1 Replies View RelatedI have a problem in the last apache upgrade (apache 2.2.8 + php5) step .
exactly in "Configure Suexec and PHP"
I found this option doesn't have multi values as CGI or Suphp just I found none :
PHP 5 Handler none
PHP 4 Handler none
I must to return to build apache1 with php4 for I can see suphp and cgi in "Configure Suexec and PHP" "PHP 4 Handler" option .
Is there any which works with this turned on?
View 3 Replies View Related(what I did find was for old apache, not 2.2)
I have Fedora Core 5 wih Apache 2.2.2 and VirtualHosts setup, currently running mod_php and mod_suexec. I would like to switch to use php with suexec because I need to edit files with php that "nobody" doesn't have access to (777 not an option).
Right now mod_suexec works great with Perl, but not PHP. So I ask, how can I get them to play nice?
Can anyone tell me the difference between SuExec and PHPSuExec. I hear eaccelerator will not work with PHPSuExec but will it work with SuExec?
View 2 Replies View Relatedwhat is phpsuexec and suexec and how to stop them ?
View 1 Replies View RelatedI've been attempting to develope a server running apache 2+, php 5, and I was running into issues installing php as cgi.... All my scripts require The shebang:
#!/usr/bin/php at the top to execute properly. Anyone know a good site/how to that explains how to do this?
has anyone else here run suexec with apache? If so, could you tell me what you compiled it with? Just curious, as I think i'm doing everything right, yet I still fail
Can I have Apache suexec with cPanel?
View 5 Replies View RelatedI had made a website which name is uscarland.com it is very attractive site therefore I had got Google Page Rank 3 But Now our site have losted Page Rank. Last weak I changed our DNS .
Can DNS effected on PR?
I wanna ask from you why I have losted our Page Rank.
when I searched my site at the google then google show it But I try to open then my site is not opened ? why
When I opened it directly then it will opened? How can Possible?
my server is centos and cpanel,
i setup it with suphp and suEXEC,
and i set the register_globals as off on server,
now,i had a website need register_globals on,
i search many articles and try to edit php.ini and .htaccess,
but all still show
FATAL ERROR: register_globals is disabled in php.ini, please enable it!
or
500 internal error
could anyone teach me how to solve the issue?
is it good or not and why we should enable or disable it in cpanel server or other server?
View 11 Replies View RelatedI have just switched from mod_php to fastcgi + suexec, but now trying to use the ab command times out :
ab -n 10000 -c 100 [url]
This is ApacheBench, Version 2.0.40-dev <$Revision: 1.146 $> apache-2.0
Copyright 1996 Adam Twiss, Zeus Technology Ltd, [url]
Copyright 2006 The Apache Software Foundation, [url]
Benchmarking www.example.com (be patient)
Completed 1000 requests
Completed 2000 requests
Completed 3000 requests
Completed 4000 requests
Completed 5000 requests
Completed 6000 requests
Completed 7000 requests
apr_poll: The timeout specified has expired (70007)
Total of 7422 requests completed
Then I get a bunch of emails from LFD ....
First uninstall your existing PHP.
Install httpd-devel
Second compile a new PHP with support of cgi/fcgi:
Code:
./configure --prefix=/usr/local/php-fcgi --enable-fastcgi --enable-memory-limit --with-mysql=shared,/usr --enable-discard-path --enable-force-cgi-redirect --with-imap=shared,/usr --with-gd=shared,/usr --with-libxml=shared,/usr --with-mbstring=shared --with-freetype-dir=/usr --with-jpeg-dir=/usr --with-png-dir=/usr --with-zlib-dir=/usr --with-kerberos --with-imap-ssl
make
make install
To solve the errors during configure problems take a look at this:
[url]
Next you'll need to download/install fcgid:
Code:
wget http://www.fastcgi.com/dist/fcgi-2.4.1-SNAP-0311112127.tar.gz
tar xfvz fcgi-2.4.1-SNAP-0311112127.tar.gz
cd fcgi-2.4.1-SNAP-0311112127
./configure
make
make install
Next you'll need to compile/install mod_fastcgi for Apache 2.2.2:
Code:
wget [url]
tar xfvz mod_fastcgi-SNAP-0404142202.tar.gz
cd fcgi-2.4.1-SNAP-0311112127
Now we need to apply a patch so mod_fastcgi compiles with Apache 2.2. Put the following into a file:
Code:
diff -ruN mod_fastcgi-2.4.2/Makefile.AP2 mod_fastcgi-2.4.2.for22/Makefile.AP2
--- mod_fastcgi-2.4.2/Makefile.AP2Mon Jul 29 03:36:34 2002
+++ mod_fastcgi-2.4.2.for22/Makefile.AP2Mon Dec 5 13:05:21 2005
@@ -20,8 +20,6 @@
all: local-shared-build
-install: install-modules
-
clean:
-rm -f *.o *.lo *.slo *.la
diff -ruN mod_fastcgi-2.4.2/fcgi_buf.c mod_fastcgi-2.4.2.for22/fcgi_buf.c
--- mod_fastcgi-2.4.2/fcgi_buf.cTue Feb 4 00:07:37 2003
+++ mod_fastcgi-2.4.2.for22/fcgi_buf.cMon Dec 5 12:59:01 2005
@@ -50,7 +50,7 @@
{
Buffer *buf;
- buf = (Buffer *)ap_pcalloc(p, sizeof(Buffer) + size);
+ buf = (Buffer *)apr_pcalloc(p, sizeof(Buffer) + size);
buf->size = size;
fcgi_buf_reset(buf);
return buf;
@@ -487,7 +487,7 @@
char *new_elts;
int new_nalloc = (arr->nalloc <0>nelts + n;
- new_elts = ap_pcalloc(arr->pool, arr->elt_size * new_nalloc);
+ new_elts = apr_pcalloc(arr->pool, arr->elt_size * new_nalloc);
memcpy(new_elts, arr->elts, arr->nelts * arr->elt_size);
arr->elts = new_elts;
diff -ruN mod_fastcgi-2.4.2/fcgi_config.c mod_fastcgi-2.4.2.for22/fcgi_config.c
--- mod_fastcgi-2.4.2/fcgi_config.cThu Oct 30 02:08:34 2003
+++ mod_fastcgi-2.4.2.for22/fcgi_config.cMon Dec 5 12:59:01 2005
@@ -50,7 +50,7 @@
/* Convert port number */
tmp = (u_short) strtol(portStr, &cvptr, 10);
if (*cvptr != '' || tmp <1> USHRT_MAX)
- return ap_pstrcat(p, "bad port number "", portStr, """, NULL);
+ return apr_pstrcat(p, "bad port number "", portStr, """, NULL);
*port = (unsigned short) tmp;
@@ -75,11 +75,11 @@
tmp = strtol(txt, &ptr, 10);
if (*ptr != '') {
- return ap_pstrcat(p, """, txt, "" must be a positive integer", NULL);
+ return apr_pstrcat(p, """, txt, "" must be a positive integer", NULL);
}
if (tmp <min> USHRT_MAX) {
- return ap_psprintf(p, ""%u" must be >= %u and <u>= %u and <u cp=''>= %d", *num, min);
+ return apr_psprintf(p, ""%d" must be >= %d", *num, min);
}
return NULL;
@@ -126,9 +126,9 @@
*num = (u_int)strtol(val, &ptr, 10);
if (*ptr != '')
- return ap_pstrcat(p, """, val, "" must be a positive integer", NULL);
+ return apr_pstrcat(p, """, val, "" must be a positive integer", NULL);
else if (*num < min)
- return ap_psprintf(p, ""%u" must be >= %u", *num, min);
+ return apr_psprintf(p, ""%u" must be >= %u", *num, min);
return NULL;
}
@@ -147,9 +147,9 @@
*num = (float) strtod(val, &ptr);
if (*ptr != '')
- return ap_pstrcat(p, """, val, "" is not a floating point number", NULL);
+ return apr_pstrcat(p, """, val, "" is not a floating point number", NULL);
if (*num <min> max)
- return ap_psprintf(p, ""%f" is not between %f and %f", *num, min, max);
+ return apr_psprintf(p, ""%f" is not between %f and %f", *num, min, max);
return NULL;
when i remove php suexec support, while i entering sites it save php files. how can solve this problem
Server info;
WHM 10.8.0 cPanel 10.9.0-R10737
CentOS 4.4 x86_64 - WHM X v3.1.0
Which VPS package would I need from Host Gator to survive a front page Digg?
[url]
Would a level 3 work?
Running wordpress with the wp-super cache plugin.
if there is a way to detect traffic spikes using weblogic server logs and depending on traffic load redirect to a static page, or load the dynamic page.
View 14 Replies View RelatedI'm reading about the fail-over system on precision effect's site, but am not 100% clear on a few points. Their live chat isn't active right now and I'd kind of like to hear from someone that actually uses the service anyway.
If there's not anyone who knows for sure, I'll just ask their live chat later on when their awake
Is their fail-over system actually a load balancing cluster comparable to cartika's hsphere plans?
I'm trying to decide between checking out cartika, precision effect, or opening another account with medialayer just for a couple more domains. Between the 3, price isn't really a concern, since the package I'd order from each, with addons and such comes out to within a dollar or two of the others.
Medialayer has been great, and I'll keep my site with them, but I have a couple other sites to put up, and am kind of drawn to the clustered solutions for max uptime per dollar.
I was searching for the web hosts that could survive the ****.com effect then I researched myself to compile this list of Web hosting providers that survive it. Web hosts that survive the **** effect
View 3 Replies View Relatedi install roundcube webmail (php)
i want to add an alias like /mail for all domain to /usr/src/roundcube
i add this command in httpd.conf:
Quote:
Alias /mail /usr/src/webmail
but because suphp installed , apache run it under root user (or user assigned to it) and suphp produce "500 Internal server Error"
i am trying to setup a VPS with:
Apache Suexec, so that each VHosts runs under there own username
FTP for each of the vhosts.
I have made a username aplushost and FTP works fine when i login, however when i try and get Suexec to work it shows a 403 permision dined, even know the whole directroy path is with correct permsions.
"/home/aplushost/www"
However if i chown the directroy "aplushost" to apaches username , currently "nobody" i have tried with "apache" and many others the page is displayed correctly.
The weird thing is that the www directroy can still be set to the aplushost username and files work inside.
However due to changing the privalages of the folder aplushost ftp now fails to login due to the folder not being owned by the ftp user "aplushost".
So im stuck between only having one item working at a time.
i have put some content of my config files.
----------httpd.conf vhosts------------------
<VirtualHost 87.117.196.247>
DocumentRoot "/home/aplushost/www"
ServerName aplushost.co.uk
SuexecUserGroup aplushost aplushost
<Directory "/home/aplushost/www">
allow from all
Options +Indexes
</Directory>
</VirtualHost>
---------------passwd file----------------
aplushost:x:500:99::/home/aplushost/www:/sbin/nologin
(Have tried with many different shells, no difference, also tried with home directroy as just /home/aplushost)
I've been browsing Google and have learned a lot about how to read stats and what to look out for. However I'm not understanding what effects what.
We've increased
max_user_connections from the default 25 to 50 and
max_connections from 500 to 1,000
What area would this effect, RAM? CPU? If I'm having issues with CPU during my heavy load times, What should I look to optimize on our web site? We also disabled gzip on css/js files to prevent the server from over-working.
I've also run into the Today's stats for the server. Can someone tell me more about the part:
Quote:
Top Process%CPU 29.0/usr/local/bin/perl -w /usr/share/munin/munin-update
Top Process%CPU 28.0/usr/local/bin/perl -w /usr/share/munin/munin-update
Top Process%CPU 27.0/usr/local/bin/perl -w /usr/share/munin/munin-update
I currently pay $9.99 USD per month for a dedicated server to host my little news site.
The specs are 667mhz / 256Mb ram / Centos / about 20-40mbit BW on a shared 100mbit port.
Anyway, I have a possibility to have one of my articles dugg soon, as It may become popular and I am wondering.. is there anyway i can tweak this box to survive DIGG?
I'm using wordpress at the moment, with lighttpd and mysql and I could possibly just make it a static http page I guess for the digging.
I think that even with lots of tweaking and serving a static HTML page, it may still die.
SO, anyway..
My maximum budget is approximately $25 USD per month, but I'd like to spend less, ideally.
Do you think I should A) get a 2800+ sempron / 2.8ghz p4 with 1GB of ram and unmetered 10mbit / 100mbit with 1.5TB
Or shared hosting? Or a VPS? or what?
OR just stick with what I have now?
Basically it will just be news articles / blog type stuff + some images.
The reason I say 10mbit unmetered is at least I know what my bill is going to be etcetc.
It has been a little while since I have frequented here, but I thought it was time that I step in here and offer up a review of Precision Effect over at www.precisioneffect.com after moving to them this past February. I have now been with Precision Effect for approximately 7 months.
I had been with a previous host, A Small Orange since June 2006, and it seemed that at least once a week I was seeing 20 to 30 minutes of downtime. After awhile, I got used to it, thinking that that is just what happens with your web host. Well after things continued to worsen over time, it got worse during the winter (end of 2007/early 2008), and I was having a number of up-time problems, including a day and half of downtime at one point (that I had posted about previously here: [url].I was finally fed up in February after I had to email their support services for a few days straight to continue to fix things.
Needless to say it was time to move as my site was growing in popularity and as I run an official message board for a #1 New York Times Best Selling Author (that I fund on my own), I felt it was only right to move to a more professional host that had better up-time and customer support.
Precision Effect is where it is at!
They completely took care of me during this stressful move from one host to another and did the complete transfer for me.
I have had a few questions here and there (very minor in nature), and they have always provided me with a professional and caring response (no matter how minute or how stupid I may have sounded to them). To me, this is a company who takes care of its customers.
The members of my site, never knew this, but one day after I was completing an update on my site, I made the mistake of deleting a directory on my server, that I believed to have been a backup file on my server, and wiped out my entire site! In ten minutes my site was backup and running from one of their backups...I don't know how they did it, but I didn't lose one post on my board!
If you are looking for a company that offers amazing up-time, professional, caring and courteous staff who will take care of you, then this is the web host for you! If this company continues to operate the way that they have for me for the past 7 months, then they have a customer for life.
This week I am about to pay for my 3rd year at Precision Effect. (Since December 2006) I've had several hosts in the years before, but after signing up for Precision Effect (heard about them on WHT), I have had absolutely no reason to change.
When I first signed up, I was worried that I would have to manually upload all the files to precision effect by first downloading them to my computer and then re-uploading them to Precision. After chatting with their tech support, however, I was able to give them a link to a rar file on my previous server which they downloaded directly to the new server and decompressed for me. They even ran a database restore with a backup file from the old database server. I could have done this myself (as I'm sure most of you could) but I really liked to see that the tech support took the time to get me settled in, especially since (at the time) I was only paying about $20/year. Past hosts would have just brushed me off.
In the past two years, I only had to contact tech support twice. Both times, I received an almost immediate response to the email (I usually email late at night) and it really felt as if they were dropping everything to fix my problem.
I'm still on one of their older (not their "LiteSpeed") servers, so I can't attest to the speed of the new ones, but my server has always been very fast. My websites are a bit graphics/database intensive and I've never had load time issues. I've also never had unscheduled downtime (a couple of times they would have some small amount of downtime for upgrades) that my "downtime detector" found, though its accuracy is only about once every 15 minutes.
So, this is a long-winded review, but Precision Effect is highly recommended!
My site will be powered by drupal and I want to know if a vps under $30 can handle instant and huge traffic that comes from digg
View 5 Replies View RelatedI've been reading more and more posts about how a quality network card is important. We build all of our servers from new, quality parts but honestly we always rely on the built in NIC on the motherboard (which are brand name motherboards, but nonetheless)
How can a lesser quality NIC effect a server other than total failure of network activity? What signs should we look for and what are quality brands? My first guess is dropped packets or low throughput. I've also heard of people saying that load can go up from a bad NIC - is there any truth to that?
How well would a website do if it was featured on d-igg with these specs? (assuming it was the only site on the server)
Xeon 2.8, Quad core 4mb cache
4gig RAM
2x73gb SCSI
2,500gb b/w