Latest LQ Deal: Latest LQ Deals
Go Back > Forums > Linux Forums > Linux - Security
User Name
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.


  Search this Thread
Old 08-21-2008, 08:41 AM   #1
Registered: Oct 2007
Location: Prague, CZ
Distribution: RedHat / CentOS / Ubuntu / SUSE / Debian
Posts: 749

Rep: Reputation: 73
PHP FastCGI security

Hello, I have only one small question. How can i disable or something like that "fgets" or "fopen" but without affecting web applications like eyeOS which uses fgets, also phpsysinfo uses this. Also using open_basedir doesnt really do it. Does anyone know how to disable this, because a user can do a small script and read files like /etc/passwd and so on.

Please let me know, thanks.
Old 08-22-2008, 02:56 AM   #2
LQ Newbie
Registered: Aug 2008
Posts: 2

Rep: Reputation: 0
try installing suPHP and Suhosin this should give you a better level of security you can work on changing lots of options including chroot php to /home/


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
FastCGI installation I_AM Linux - General 1 05-10-2009 05:30 AM
Ruby / Fastcgi Problem I_AM Linux - Software 1 03-09-2008 07:15 AM
Setup Apache2 with PHP FastCGI jlukensow Linux - Server 1 01-29-2008 04:30 PM
PHP FastCGI/Apache Module Question.... Voltar Linux - Software 4 06-22-2006 12:45 PM
Mod FastCGI - Error 1 during make nutnut Linux - Software 3 04-11-2006 03:38 PM > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 01:33 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration