473,804 Members | 3,138 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

mod_php not secure?

Hi all,

I noticed that with Slackware they don't include
mod_php in the latest distro. I also noticed some
talk on the web that there was an insecurity
issue with mod_php in a previous version of
Slackware.

So is this just a Slackware mishap or is there
a good reason to no longer permit PHP from
Apache?

Thanks for any (nonpartisan) info-

Jul 17 '05 #1
6 2241
On 26 Jun 2005 06:03:22 -0700, ya********@yaho o.com wrote:
I noticed that with Slackware they don't include
mod_php in the latest distro.
ftp://ftp.slackware.com/pub/slackwar...t/slackware/n/
http://www.slackware.com/pb/showdesc...-4.3.11-i486-1
http://download.mirror.ac.uk/sites/f....10-i486-1.txt

Looks included to me?
I also noticed some
talk on the web that there was an insecurity
issue with mod_php in a previous version of
Slackware.


This one?

http://www.slackware.com/security/vi...ecurity.437272

That was upgrading to the latest version of PHP due to a security issue found
in there. AFAIK it's safe again now.

--
Andy Hassall / <an**@andyh.co. uk> / <http://www.andyh.co.uk >
<http://www.andyhsoftwa re.co.uk/space> Space: disk usage analysis tool
Jul 17 '05 #2
>Looks included to me?

No... look in the tarball. There are no files such as
mod_php*.so.

It's missing.

Jul 17 '05 #3
*** ya********@yaho o.com wrote/escribió (26 Jun 2005 17:02:31 -0700):
No... look in the tarball. There are no files such as
mod_php*.so.

It's missing.


I'm running PHP as Apache 2 module in Red Hat 9 and there's no such file as
mod_php.so or the like. Are you sure the regular php package doesn't
include all you need?
--
-- Álvaro G. Vicario - Burgos, Spain
-- http://bits.demogracia.com - Mi sitio sobre programación web
-- Don't e-mail me your questions, post them to the group
--
Jul 17 '05 #4


Alvaro G Vicario wrote:
I'm running PHP as Apache 2 module in Red Hat 9 and there's no such file as
mod_php.so or the like. Are you sure the regular php package doesn't
include all you need?


No, but in the documentation it says I need to use
a file in /usr/libexec/apache called mod_php.so or something.
The only php-related file in that directory is libphp4.so,
which I tried specifying but it doesn't work.

It would be easier for me to write my own simple
web server than deal with this hassle.

Incidentally:

Could it be that Apache is so popular because the people
using it are not programmers?

Jul 17 '05 #5
*** ya********@yaho o.com wrote/escribió (27 Jun 2005 03:50:44 -0700):
No, but in the documentation it says I need to use
a file in /usr/libexec/apache called mod_php.so or something.
The only php-related file in that directory is libphp4.so,
which I tried specifying but it doesn't work.

It would be easier for me to write my own simple
web server than deal with this hassle.


That's the reason why I never recompile anything. Binary packages work out
of the box and I love that :)
--
-- Álvaro G. Vicario - Burgos, Spain
-- http://bits.demogracia.com - Mi sitio sobre programación web
-- Don't e-mail me your questions, post them to the group
--
Jul 17 '05 #6
On 27 Jun 2005 03:50:44 -0700, ya********@yaho o.com wrote:
Alvaro G Vicario wrote:
I'm running PHP as Apache 2 module in Red Hat 9 and there's no such file as
mod_php.so or the like. Are you sure the regular php package doesn't
include all you need?
No, but in the documentation it says I need to use
a file in /usr/libexec/apache called mod_php.so or something.


Which documentation?

http://www.google.com/search?q=mod_p...w.php.net&l=en

There are some hits on Google for "mod_php.so " but several refer to PHP3. Is
perhaps mod_php an alternate name used on some distros to fit in with naming
conventions? Doesn't seem to be the default, at least not nowadays.
The only php-related file in that directory is libphp4.so,
That is the Apache loadable module for PHP. There's no mod_php.so on my system
either.
which I tried specifying but it doesn't work.


Doesn't it?

--
Andy Hassall / <an**@andyh.co. uk> / <http://www.andyh.co.uk >
<http://www.andyhsoftwa re.co.uk/space> Space: disk usage analysis tool
Jul 17 '05 #7

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

5
1859
by: zaphod | last post by:
I've recently considered switching from mod_perl to mod_php because mod_perl, unless configured with multiple servers/ports/IP addresses, serves static HTML from mod_perl processes, which is grossly inefficient. Since I do not think you should have to tamper so much with server configs to do web development efficiently I'm considering mod_php instead. I need to know if PHP handles this differently: - Are static HTML requests handled...
40
1296
by: Shufen | last post by:
Hi all, Can someone who has use PHP before and know quite well about the language, tell me what are the stuffs that Python offers and PHP doesn't. A few examples will be nice. I know about the date format problem which PHP is having but I need more examples. Thank you for any help. Shufen
3
1399
by: emilper | last post by:
Hi, while using mod_php in apache: If I am including one .inc file in one page, does it get compiled and kept in memory so when I include the same file in another page on the same server, the server won't have to search for it and recompile it ? does mod_php provide other advantages besides preloading the php interpretor/compiler in memory ?
5
3557
by: howachen | last post by:
hi, which package you perfer? mod_php on apache is okay but some people said fastcgi version of php is faster, is it true? thanks...
7
25726
by: Vincent Delporte | last post by:
Hello I'm interested in hearing reflections by seasoned web app developpers about the different ways to write PHP apps, and especially how they compare in terms of performance, whether it's the PHP part or connections to MySQL. As far as I know, there are different ways to write a PHP application: - CGI, ie. the usual way : some PHP code in web pages, and the PHP interpreter is loaded each time a PHP page is called
0
3183
by: R.A.M. | last post by:
Hello, I am using Fedora 7 Moonshine Linux with Apache installed. I have installed PHP5 using command: yum install php. Then I configured httpd adding module mod_php.so to httpd.conf (and other necessary operations). The problem is that when I am trying to start Apache using command: httpd -k start, I receive error of missing mod_php.so. To solve the problem, I downloaded mod_php.2.0.1.-9.s390.rpm and executed command: rpm -i...
2
1713
by: Evil Son | last post by:
Hello group, If I switched from mod_php to fast-cgi, would I need to make any changes to my php source? Also, will something like APC still be useful? Will my database connections suddenly become persistent? If I had static data in my script, will it persist when that same
4
4358
by: setesting001 | last post by:
How many of you are running Fast CGI instead of the popular mod_php? I planning to change to fast cgi since my applications need around 15MB memory to handle a single request, so consider if Apache running in multi-process mode, serving 300 clients, then it nearly used up all my memory in my server. Any experience can share how to handle large concurrent clients for PHP?
7
3623
by: yawnmoth | last post by:
Correct me if I'm wrong, but isn't running PHP via mod_php faster than running it via CGI? If so, why would a web hosting company be running PHP via CGI and not mod_php? I asked that very question to one web hosting company and given the following response: "We run our php based on what is secure, not what could be a few seconds faster"
0
9706
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
10332
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
1
10321
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
10077
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
9152
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
1
7620
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
5522
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
0
5651
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
4300
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.