Home / server / Questions / 125259
Accepted
ServerChecker
Asked: 2010-03-23 21:46:09 +0800 CST

Is there another way to run Apache2 securely for end users without using CGI mode?

  • 772

Is there another way to run Apache2 securely for multiple end users (like hosting hundreds of blogs) without using CGI mode as required by suPHP?

It just seems so inefficient to use CGI mode for PHP when if we could set up permissions properly, we could host PHP through mod_php perhaps?

I mean, I do want to restrict these users to their home directories for their sites, but don't want any security issues.

php apache-2.2 cgi security

2 Answers

  1. Best Answer

    PHP support FastCGI out of the box, so you could use mod_fastcgi or mod_fcgid and SuExec to run PHP scripts. It has almost the same performance as mod_php but still will run the scripts in individual user contexts.

    You should also read this article series about securing shared hosting platforms.

    • 2

  2. I'm looking at MPM-ITK. Each vhost runs as it's own uid:gid. It's a prefork, so there's no threading problems either.

    • 2