Re: PHP question

2009-01-20 Thread Brian A. Seklecki
On Wed, 2009-01-14 at 15:26 -0500, Albert Thiel wrote:
 I am trying to figure out how to get a working Apache 2.x server with PHP in 
 a safe configuration (or 
 as safe as possible based upon all the vulns).  I do not need a database.
 
 What version and options is my best bet.  I have tried on my own but losing 
 it.  Nothing I have tried 
 works.  

This is the wrong list of general PHP setup instructions.  

PHP4 is dead.  PHP5 is nearing beta1 of 5.3.  Use 5.2.9 in the mean
time.

# cd /usr/ports/lang/php5  make config  make install

Modify your apache22 httpd.conf accordingly to activate the module.
There are thousands of sites that explain the proces.

Security with PHP involves writing code well, both in your application,
and in the PHP engine -- as well as responsible administration: locking
out insecure features in php.ini

~BAS


signature.asc
Description: This is a digitally signed message part


PHP question

2009-01-14 Thread Albert Thiel
I am trying to figure out how to get a working Apache 2.x server with PHP in a 
safe configuration (or 
as safe as possible based upon all the vulns).  I do not need a database.

What version and options is my best bet.  I have tried on my own but losing it. 
 Nothing I have tried 
works.  

I still use PERL and trust it for 99% of my work, but have a need for one 
application that uses PHP 
(a chat app for Customer Sales/Support).  I plan to give it it's own server 
just in case...

Any help would be appreciated.  -AL


Albert Thiel
ath...@yourdatacenter.com

Your Data Center  HostLongIsland.com
Powerful FREE ISP Tools, Mail  Website Hosting
http://www.YourDataCenter.com
Hewlett, New York
(877)302-8642


 

___
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to freebsd-ports-unsubscr...@freebsd.org


Re: PHP question

2009-01-14 Thread Chuck Swiger

On Jan 14, 2009, at 12:26 PM, Albert Thiel wrote:
I am trying to figure out how to get a working Apache 2.x server  
with PHP in a safe configuration (or
as safe as possible based upon all the vulns).  I do not need a  
database.


What version and options is my best bet.  I have tried on my own but  
losing it.  Nothing I have tried

works.



Make sure your ports tree is up-to-date, and then:

cd /usr/ports/www/apache20  # or apache22 if you prefer
make install

/usr/ports/lang/php5
make config # enable build apache module and  
Suhosin protection at the very least

make install

cd /usr/ports/lang/php5-extensions
make config # select any additional PHP  
modules and extensions you want

make install

Look at less /usr/ports/lang/php5/pkg-message.mod and other  
documentation from http://www.php.net.


Regards,
--
-Chuck

___
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to freebsd-ports-unsubscr...@freebsd.org