Kauft das PHP-Sicherheitsbuch!


Dritte Auflage
Jetzt das eBook bestellen!
€ 36,00
Als eBook nur € 28,99!

Links

XING
(Profil nur für Xing-Mitglieder sichtbar)
VServer Hosting
@christopherkunz

Pages

Frontpage
About Christopher Kunz
Kontaktformular

Tag cloud

@christopherkunz

Wednesday, November 30. 2005

Migrating hosting servers from mod_php4 to PHP/FastCGI - a daunting task?

PHP

We have been running mod_php on our customer hosting servers for several reasons, but I have never been truly satisfied with that situation. The security risks are the most obvious problem, since Safe Mode is not a practicable solution and open_basedir is not quite secure enough for mission-critical applications.
Now I need to assess (err... not asses.) the breakage potential - I hope you can help me with that. :-)


I want to migrate the first couple of machines to PHP5/FastCGI in the
beginning of January, and have the task of assessing the code breakage
and support potential. Apart from header operations concerning HTTP
response headers, what are the major problems I might encounter? BC
breakage of PHP5 is more or less covered, since customers will have a
choice between the two versions, but I need to know what problems are
going to arise with FastCGI before I migrate.

Another problem might be per-VirtualHost and .htaccess-based PHP
configuration. Since both will stop working as soon as we ditch mod_php
(at least AFAICT), I need a possibility for customers to manipulate
non-critical parameters like register_globals without giving them full
access over php.ini. What options do I have there?

I really need input on this one, since I have finally convinced myself
to tackle this problem and want to avoid unnecessary problems for my
customers and support staff (read: for me).
Posted by Christopher Kunz in PHP at 14:44 | Comments (5) | Trackbacks (0)
Defined tags for this entry: , , ,
Related entries by tags:

Trackbacks
Trackback specific URI for this entry

No Trackbacks

Comments
Display comments as (Linear | Threaded)

Meine Mutter kann ziemlich gute Leberwurstbrote machen.
#1 Arzt (Homepage) on 2005-11-30 19:03 (Reply)
http://www.syscp.de/docs/public/php-fcgi/german

notlösung bookmark
#2 Arzt (Homepage) on 2005-11-30 19:06 (Reply)
You might be interested to see what Sean Heacock is doing with mod_php (5) and Apache 2 at Telana:
http://www.telana.com/peruser.php
#3 David Rodger on 2005-12-01 02:37 (Reply)
peruser_mpm is less efficient than fastcgi.
#3.1 Alexey Zakhlestin (Homepage) on 2005-12-01 09:53 (Reply)
TextDrive uses PHP5 + FastCGI in a different way to what I’ve seen in the past with various shared hosting providers and provide brief information as to how they are running it on their shared hosting servers over at the following blog entry http://weblog.textdrive.com/article/182/why-we-like-php-fastcgi-and-its-flexibility

I moved my personal website www.powertrip.co.za over to textdrive I had to change my setup to use a custom php.ini and set settings I used to set in httpd.conf and still use my autoprepend file for the site. Works well but can be slightly annoying figuring out the differences from mod_php5 to php5 via fastcgi
#4 Jacques Marneweck (Homepage) on 2005-12-02 21:29 (Reply)

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA