Welcome! Log In Create A New Profile

Advanced

[PHP] php safe mode no more?

Posted by D. Dante Lorenso 
D. Dante Lorenso
[PHP] php safe mode no more?
August 02, 2012 11:10PM
The school I work with wants to set up PHP and MySQL hosting for about
10,000 students.

I see that in 5.4, PHP safe-mode is being removed. How is it supposed
to be done if not safe-mode?

Are all the hosting providers using suExec and running PHP as CGI or
FastCGI? If I'm trying to do this the right way, what way is that?
Anyone got link or pointers on what I need to learn?

-- Dante


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
Lester Caine
Re: [PHP] php safe mode no more?
August 03, 2012 11:00AM
D. Dante Lorenso wrote:
> The school I work with wants to set up PHP and MySQL hosting for about 10,000
> students.
I suspect that if you have a lot of students active at once you will need a few
machines to support this. I'd certainly recommend a separate machine running the
database and not MySQL but that is my own pet hate ;) - postgres would be
preferable if only to get new users trained in a better standard. I run firebird
database servers myself.

Apache can be configured to provide individual logins, and it's ring fencing
their data areas that is the important bit, but you will need a lot of storage
space for 10000 users.

> I see that in 5.4, PHP safe-mode is being removed. How is it supposed to be
> done if not safe-mode?
It was the wrong solution to the problem.
But as with much that is happening on PHP today, killing things off is being
actioned without any real documented support as to how to replace it. Not their
problem is the usual response when we ask how something should be done like this :(

> Are all the hosting providers using suExec and running PHP as CGI or FastCGI?
> If I'm trying to do this the right way, what way is that? Anyone got link or
> pointers on what I need to learn?
Another one is suphp but that seems to have stalled?

Having been scuppered recently because SUSE seems to have lost it's way as well,
I've just started a setup using Debian so I can get the latest Apache and PHP,
and one link that poped up which looks useful is
http://x10hosting.com/forums/vps-tutorials/148894-debian-apache-2-2-fastcgi-php-5-suexec-easy-way.html
.. I have always used the apache php module, so was looking to give CGI a try as
a comparison, but I don't have any need for the cross user security myself. My
users just access their material at the PHP level, securely stored in their own
databases :)

--
Lester Caine - G8HFL
-----------------------------
Contact - http://lsces.co.uk/wiki/?page=contact
L.S.Caine Electronic Services - http://lsces.co.uk
EnquirySolve - http://enquirysolve.com/
Model Engineers Digital Workshop - http://medw.co.uk
Rainbow Digital Media - http://rainbowdigitalmedia.co.uk



--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
tamouse mailing lists
Re: [PHP] php safe mode no more?
August 04, 2012 10:00AM
What I've noticed running apache suexec + fastcgi is that the memory
requirements increased over running nonsuexec and mod_php under
apache. when i went to a nginx + fastcgi, things worked much better
overall with limited memory (i'm on 1GB limited slice, non-burstable).

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
Lester Caine
Re: [PHP] php safe mode no more?
August 04, 2012 12:00PM
tamouse mailing lists wrote:
> What I've noticed running apache suexec + fastcgi is that the memory
> requirements increased over running nonsuexec and mod_php under
> apache. when i went to a nginx + fastcgi, things worked much better
> overall with limited memory (i'm on 1GB limited slice, non-burstable).

Funny you should mention nginx ... that one is on my todo list as well ...

--
Lester Caine - G8HFL
-----------------------------
Contact - http://lsces.co.uk/wiki/?page=contact
L.S.Caine Electronic Services - http://lsces.co.uk
EnquirySolve - http://enquirysolve.com/
Model Engineers Digital Workshop - http://medw.co.uk
Rainbow Digital Media - http://rainbowdigitalmedia.co.uk



--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
Marco Behnke
Re: [PHP] php safe mode no more?
August 04, 2012 09:20PM
Am 04.08.12 11:51, schrieb Lester Caine:
> tamouse mailing lists wrote:
>> What I've noticed running apache suexec + fastcgi is that the memory
>> requirements increased over running nonsuexec and mod_php under
>> apache. when i went to a nginx + fastcgi, things worked much better
>> overall with limited memory (i'm on 1GB limited slice, non-burstable).
>
> Funny you should mention nginx ... that one is on my todo list as well
> ...
>
I can definetly recommend that one.
I tested nginx + php-fpm against apache2 + mod_php. Since then every
server setup for PHP appliactions is done with nginx + php-fpm. It is
faster and uses less memory.

--
Marco Behnke
Dipl. Informatiker (FH), SAE Audio Engineer Diploma
Zend Certified Engineer PHP 5.3

Tel.: 0174 / 9722336
e-Mail: marco@behnke.biz

Softwaretechnik Behnke
Heinrich-Heine-Str. 7D
21218 Seevetal

http://www.behnke.biz
Sorry, only registered users may post in this forum.

Click here to login