Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 620
  • Last Modified:

Help with php parsing on apache

Is it a good idea to run suEXEC when your using fcgi to parse your php files on apache?
0
sparingatom
Asked:
sparingatom
  • 2
1 Solution
 
wwwdeveloper2Commented:
what issues are you specifically worried about?  Security, stabilization, or what?

Running suEXEC is a good idea for running the applications as different users, especially if you are in a shared hosting environment.  Just understand that there are a lot of assumptions that you are familiar with your system's security or using suExec can open a lot of holes.  

Here is a good article that might be worth you reading if you are planning to go this route.  Just be safe and you can definitely run with this type of setup.

http://httpd.apache.org/docs/current/suexec.html

0
 
schwompCommented:
Hello!

> or using suExec can open a lot of holes.  

Could you explain?

I am using suexec with fcgid and it works like a charm.

Bye
0
 
wwwdeveloper2Commented:
Schwomp -  Check the link I submitted - It is way too much to explain here, but if you want to submit a question maybe it would more help.  

"Used properly, this feature can reduce considerably the security risks involved with allowing users to develop and run private CGI or SSI programs. However, if suEXEC is improperly configured, it can cause any number of problems and possibly create new holes in your computer's security. If you aren't familiar with managing setuid root programs and the security issues they present, we highly recommend that you not consider using suEXEC."  - From Apache
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now