Download as PDF, PPTX
Uploaded byPhill Brown
PHP Handlers
The document discusses various PHP handlers, including DSO, CGI, suphp, and fastcgi, highlighting their CPU and memory usage, as well as ownership and accelerator support. It emphasizes the benefits of mod_ruid2, which allows for better process ownership control by running scripts under specific user credentials, thus enhancing security and performance. Ultimately, the preferred setup combines DSO with mod_ruid2 for optimized resource management across different sites.
More Related Content
PHP Handlers
- 1. Secure, Fast andExperimental PHP Handling PBWEB.CO.UK @PHILL_BROWN
- 2. What is aPHP Handler? <?php Interprets Hello echo ‘Hello’; code
- 3. DSO (mod_php) • MakesPHP part of Apache • Oldest and most common • Runs in the same process as Apache - low CPU and memory usage • PHP-created files owned by apache user
- 4. CGI • Run asa program outside of your server • Reads php.ini configuration at runtime • Loads PHP on every request - requires more CPU time and processes
- 5. suPHP • Apache runsas the user that owns the requested PHP script • Doesn’t support PHP accelerators eg APC • High CPU usage
- 6. FastCGI • Apache runsas the user that owns the requested PHP script • Keeps a persistent session in the background • Lower CPU but high memory usage
- 7. Summary DSO CGI suPHP FastCGI CPU usage Memory usage Run as file owner Supports PHP Accelerators
- 8. The Ultimate HandlerSetup CPU usage Memory usage Run as file owner Supports PHP Accelerators
- 9.
- 10. What is mod_ruid2? mod_ruid2 Apache /webroot Tells Apache to run Loads a wrapper /webroot files as User1 program that executes and Group1 your scripts using the configured credentials
- 11. Where did mod_ruid2come from? mod_suid2 Faster mod_ruid2 Makes use of the Linux kernel to reduce processes
- 12. How do weuse mod_ruid2 to achieve The Ultimate Handler Setup?
- 13.
- 14. DSO • Low CPUusage mod_ruid2 • Process ownership control • Low memory usage • PHP accelerator support
- 15. Apache server User2 Site1 files Site2 files Site3 files owned by owned by owned by User1 User2 User3
- 16. Apache is imprisonedin each website
- 17.
- 18. Site 1 includes misc modules Apache can write to any file profiles scripts sites themes index.php ...
- 19. Site 1 includes misc But we can modules profiles scripts lockdown Apache sites/default/files themes index.php ... even further
- 20. Create a separateuser for Apache
- 21. Group User ApacheUser
- 22. This is The Ultimate Handler Setup ‐rw‐r‐‐‐‐‐ User Group index.php drwxrwx‐‐‐ User Group sites/default/files
- 23. Thank you forlistening! Handling questions.. PBWEB.CO.UK @PHILL_BROWN