Questions tagged [suexec]

97 questions
0
votes
1 answer

From suPHP to mod_php

I have a Centos6 64-bit server, Apache/2.2.15, PHP5.3.3, one IP and four name-based virtual hosts and SSL/SNI to provide https in addition to http. All those hosts are assigned to different linux users. I have root access to server and all those…
Timo Kähkönen
  • 156
  • 1
  • 6
0
votes
1 answer

How to avoid '403 Forbidden' response in Apache with suEXEC enabled

I have configured an Apache 2.2 web server with suEXEC following a couple of tutorials after reading the official documentation. I'll put a short summary here: # Install and enable Apache, suEXEC, FastCGI and PHP5 aptitude install apache2-mpm-worker…
elitalon
  • 209
  • 5
  • 15
0
votes
3 answers

Preventing error_log flooding

Is there a way to have httpd/php stop logging errors if they are repeating over and over again to prevent flooding? Currently the /usr/local/apache/logs/error_log file is getting flooded and would like to prevent that.
Tiffany Walker
  • 6,681
  • 14
  • 56
  • 82
0
votes
3 answers

Apache - suExec - FastCGI - PHP = security issue

I installed Apache with FastCGI (mod_fastcgi), suExec and PHP on my local development box. Working perfectly, except one thing. Let's say I have two users: user1 - /home/user1/public_html user2 - /home/user2/public_html I discovered a serious…
Jari V.
  • 13
  • 1
  • 3
0
votes
2 answers

Apache with suexec, fcgid shows content from wrong vHost over ssl

I changed my Apache setup to worker mode, suexec und fcgid as described in this tutorial: https://wiki.hetzner.de/index.php/Apache_PHP5_fcgi_und_SuExec. Allmost everything works fine. I wrote a script, that sets up everything for me and also creates…
chris
  • 21
  • 2
0
votes
2 answers

Apache 2.4 and SuExec configuration

If I want PHP and other scripts to run as their own user when accessed from a web browser, is this the right way to configure apache? ./configure --enable-so --enable-deflate --enable-expires --enable-headers --enable-rewrite --with-included-apr…
Tiffany Walker
  • 6,681
  • 14
  • 56
  • 82
0
votes
1 answer

PHP Permissions (chmod vs. suEXEC)

I have an application that claims to require chmod 777 permissions for two of its directories (and their subdirectories). Instead of doing that, would suEXEC be a more secure alternative?
Trent Scott
  • 959
  • 1
  • 12
  • 28
0
votes
1 answer

How do I utilize suexec to allow a php script to run a linux command?

I would like to execute a php script in a browser that will in turn execute a single linux command and return its output. When I first decided to test this out I created this:
Kenneth Vogt
  • 113
  • 2
  • 8
0
votes
1 answer

suEXEC before Apache dead

One of our Apache server went down. After the web server restarts, there is a red light on the server panel and we are contacting hardware vendor to investigate any potential hardware issue. The last line in error_log before server down…
ohho
  • 1,005
  • 8
  • 19
  • 34
0
votes
1 answer

Debian, Plesk and Nagios problems

I have a Debian 5 + Plesk 9.5.4 installation on my server, and just installed Nagios3 via apt-get. I have set up a subdomain on my virtualhost, with cgi support in Plesk, and then copied any nagios cgi to that new directory, setting that cgi files'…
0
votes
1 answer

Apache w/ fcgid and suexec: second vhost returning 'Forbidden'

I have an Apache install set up with suExec and vhosts.. The original ("primary") vhost works fine, but I'm having some issues with a second one I've added; returning a 403 response. Considering this is just a development instance for the same site,…
Morgon
  • 203
  • 1
  • 6
0
votes
2 answers

How to debug a leeching apache process?

I am running apache2 with mod-fcgid, suexec and SysCP. From time to time, the apache process gets stuck using 100% CPU on one core on my server. The apache is also unable to handle any additional requests in this state. I need to kill -9 the process…
Thomas
  • 221
  • 1
  • 2
  • 5
0
votes
1 answer

Creating users/groups via PHP

I'm creating an internal tool that needs a bit of cpanel/webmin type functionality, but this isn't a situation where I could use one of those Right now I need to be able to create linux users, groups, and directories via PHP. Here's what I have…
Lowgain
  • 247
  • 1
  • 2
  • 7
0
votes
2 answers

Forcing scripts on apache to run under different accounts to enhance security?

My client's website was recently defaced and they are seeking was to mitigate this risk. They have a dedicated server running apache and mod_php. The website consists of three separate php applications installed in different folders (Customer portal…
Michelle
  • 923
  • 5
  • 20
  • 30
0
votes
1 answer

Setting up Suexec on apache on Godaddy Virtual private hosting

I have recently purchased Godaddy VPS (Virtual Private Server) with their custom control panel and CentOS 5.4 From their control panel I am able to add domains to the server with their own user and directory. Example:- Domain: Dummy.com …
user47494