LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 08-21-2008, 08:41 AM   #1
robertjinx
Member
 
Registered: Oct 2007
Location: Prague, CZ
Distribution: RedHat / CentOS / Ubuntu / SUSE / Debian
Posts: 749

Rep: Reputation: 73
PHP FastCGI security


Hello, I have only one small question. How can i disable or something like that "fgets" or "fopen" but without affecting web applications like eyeOS which uses fgets, also phpsysinfo uses this. Also using open_basedir doesnt really do it. Does anyone know how to disable this, because a user can do a small script and read files like /etc/passwd and so on.

Please let me know, thanks.
 
Old 08-22-2008, 02:56 AM   #2
HostsVault
LQ Newbie
 
Registered: Aug 2008
Posts: 2

Rep: Reputation: 0
try installing suPHP and Suhosin this should give you a better level of security you can work on changing lots of options including chroot php to /home/
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
FastCGI installation I_AM Linux - General 1 05-10-2009 05:30 AM
Ruby / Fastcgi Problem I_AM Linux - Software 1 03-09-2008 07:15 AM
Setup Apache2 with PHP FastCGI jlukensow Linux - Server 1 01-29-2008 04:30 PM
PHP FastCGI/Apache Module Question.... Voltar Linux - Software 4 06-22-2006 12:45 PM
Mod FastCGI - Error 1 during make nutnut Linux - Software 3 04-11-2006 03:38 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 01:33 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration