Help with php parsing on apache

Posted on 2011-02-22
Medium Priority
Last Modified: 2013-12-13
Is it a good idea to run suEXEC when your using fcgi to parse your php files on apache?
Question by:sparingatom
  • 2

Accepted Solution

wwwdeveloper2 earned 2000 total points
ID: 34957531
what issues are you specifically worried about?  Security, stabilization, or what?

Running suEXEC is a good idea for running the applications as different users, especially if you are in a shared hosting environment.  Just understand that there are a lot of assumptions that you are familiar with your system's security or using suExec can open a lot of holes.  

Here is a good article that might be worth you reading if you are planning to go this route.  Just be safe and you can definitely run with this type of setup.



Expert Comment

ID: 34963435

> or using suExec can open a lot of holes.  

Could you explain?

I am using suexec with fcgid and it works like a charm.


Expert Comment

ID: 34963495
Schwomp -  Check the link I submitted - It is way too much to explain here, but if you want to submit a question maybe it would more help.  

"Used properly, this feature can reduce considerably the security risks involved with allowing users to develop and run private CGI or SSI programs. However, if suEXEC is improperly configured, it can cause any number of problems and possibly create new holes in your computer's security. If you aren't familiar with managing setuid root programs and the security issues they present, we highly recommend that you not consider using suEXEC."  - From Apache

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

It’s a season to be thankful, and we’re thankful for users like you who engage on site, solve technology problems, and network with others in the industry. What tech are we most thankful for? Keep reading.
The title says it all. Writing any type of PHP Application or API code that provides high throughput, while under a heavy load, seems to be an arcane art form (Black Magic). This article aims to provide some general guidelines for producing this typ…
The viewer will learn how to dynamically set the form action using jQuery.
The viewer will learn how to create and use a small PHP class to apply a watermark to an image. This video shows the viewer the setup for the PHP watermark as well as important coding language. Continue to Part 2 to learn the core code used in creat…

600 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question