Disable PHP?

Harry Seldon · 04-06-2006, 03:40 PM

Is there a way to disable PHP without actually uninstalling it? I'm trying to work with a security audit team and I've got some alerts on PHP installs. I can probably just uninstall it but we need to make sure it isn't needed before we do. The three servers I have with this problem are all really old (RH7.2 and 6.1) so I'm not sure I can find the old packages to reinstall if I have to. Any suggestions, or am I stuck with removing the packages?

Harry Seldon · 04-06-2006, 04:35 PM

Nevermind. I found a setting in the /etc/php.ini file that allowed me to not advertise the fact that php is installed. It also had a bunch of settings that, when commented out, disassociate php with other applications.

nickj6282 · 04-06-2006, 04:37 PM

You could comment the LoadModule line in your httpd.conf file. Just find this line in /etc/httpd.conf (or wherever your Apache config file is):

Code:

LoadModule php4_module     /usr/lib/apache2-prefork/libphp4.so

(or whatever your LoadModule line is for PHP) and add a '#' symbol to the beginning of the line to comment it out.

-Nick