Re: [ubuntu-uk] PHP security

2010-06-16 Thread Chris Rowson
Please feel free to point out any errors etc. I might work this into a how to and publish it on the 'tinterweb (of course giving proper attribution to folk such as Tyler) as instructions on how to do this seem to be spread across quite a few sites. I'm glad you solved it, Chris!

Re: [ubuntu-uk] PHP security

2010-06-15 Thread Chris Rowson
Here's the my current level of understanding! If anyone can fill in the gaps (or correct me if I'm wrong) I'd be really grateful. (snipped for brevity) Your stated understanding is correct, as far as I know it. What I'm still hazy on is this: cgi is slower than fastcgi because it (a bit

Re: [ubuntu-uk] PHP security

2010-06-15 Thread Tyler J. Wagner
On Tuesday 15 June 2010 21:04:38 Chris Rowson wrote: Please feel free to point out any errors etc. I might work this into a how to and publish it on the 'tinterweb (of course giving proper attribution to folk such as Tyler) as instructions on how to do this seem to be spread across quite a few

Re: [ubuntu-uk] PHP security

2010-06-12 Thread Chris Rowson
On Sat, Jun 12, 2010 at 6:50 AM, Tyler J. Wagner ty...@tolaris.com wrote: On Friday 11 June 2010 23:17:07 Chris Rowson wrote: That's easy. Again, webmin + virtualmin will set it up for each domain/account pretty easily. But here are the packages you need: Also, unfortunately there's no

Re: [ubuntu-uk] PHP security

2010-06-11 Thread Chris Rowson
I'm migrating a web server with a few sites from a CentOS based VPS with a DirectAdmin control panel to an Ubuntu Lucid server. I'm not incredibly bothered about losing the control panel, but I wondered if anyone had any advice on securing PHP scripts so that scripts owned by separate 'site

Re: [ubuntu-uk] PHP security

2010-06-11 Thread Tyler J. Wagner
On Friday 11 June 2010 17:47:08 Chris Rowson wrote: Here's the my current level of understanding! If anyone can fill in the gaps (or correct me if I'm wrong) I'd be really grateful. (snipped for brevity) Your stated understanding is correct, as far as I know it. What I'm still hazy on is

Re: [ubuntu-uk] PHP security

2010-06-11 Thread Chris Rowson
Here's the my current level of understanding! If anyone can fill in the gaps (or correct me if I'm wrong) I'd be really grateful. (snipped for brevity) Your stated understanding is correct, as far as I know it. What I'm still hazy on is this: cgi is slower than fastcgi because it (a bit

Re: [ubuntu-uk] PHP security

2010-06-11 Thread Chris Rowson
That's easy. Again, webmin + virtualmin will set it up for each domain/account pretty easily. But here are the packages you need: Also, unfortunately there's no Lucid installer yet for virtualmin. I might have a look at what's involved in installing it from scratch. Chris --

Re: [ubuntu-uk] PHP security

2010-06-11 Thread Tyler J. Wagner
On Friday 11 June 2010 23:17:07 Chris Rowson wrote: That's easy. Again, webmin + virtualmin will set it up for each domain/account pretty easily. But here are the packages you need: Also, unfortunately there's no Lucid installer yet for virtualmin. I might have a look at what's involved in

Re: [ubuntu-uk] PHP security

2010-06-10 Thread Chris Rowson
I'm migrating a web server with a few sites from a CentOS based VPS with a DirectAdmin control panel to an Ubuntu Lucid server. I'm not incredibly bothered about losing the control panel, but I wondered if anyone had any advice on securing PHP scripts so that scripts owned by separate 'site

[ubuntu-uk] PHP security

2010-06-10 Thread Chris Rowson
Hello server admins! I'm migrating a web server with a few sites from a CentOS based VPS with a DirectAdmin control panel to an Ubuntu Lucid server. I'm not incredibly bothered about losing the control panel, but I wondered if anyone had any advice on securing PHP scripts so that scripts owned by

Re: [ubuntu-uk] PHP security

2010-06-10 Thread Tyler J. Wagner
On Thursday 10 June 2010 23:19:28 Chris Rowson wrote: I'm migrating a web server with a few sites from a CentOS based VPS with a DirectAdmin control panel to an Ubuntu Lucid server. I'm not incredibly bothered about losing the control panel, but I wondered if anyone had any advice on securing