Re: [Phpwebsite-developers] Issues running with php command line

[Shaun M. <sh...@ae...>]

On 3 May 2007, at 23:18, Tuc at T-B-O-H.NET wrote:

>>
>>>  I'm trying to run under CGIWRAP for Php, which is forcing me to
>>>  run via the command line. In doing so, I really can't seem to get
>>>  too far
>>>  on this.
>>
>> My lack of response is due to my inexperience with running php in cgi
>> mode. Should anyone have insight what can be changed to enable the
>> script in this environment, I'd be happy to make the changes.
>>
> 	I'm being told from the CGIWRAP people that it should "WORK",
> but when I post my CGIWRAP config, I get a deafening silence.......
>
> 	What are others using for PHP security?

I've used phpsuexec in the past which runs PHP as a CGI.I It's common  
on cPanel based servers. Mostly I don't though. It's too restrictive.  
It doesn't force you to use the commandline though from what I  
remember of it.

For the types of attacks I get I find mod_security, a decent firewall  
and a couple of changes to my mail server are enough to work with.  
More work for me perhaps but less restrictions on my users, namely  
not having .htaccess use, which is the biggest restriction with  
phpsuexec and most of the cgi methods.

I know most of my users too and watch any new users I don't.


Shaun
aegis design - http://www.aegisdesign.co.uk
aegis hosting - http://www.aegishosting.co.uk