https://wiki.eofnet.lt/w//index.php?action=history&feed=atom&title=Apache2_SuPHP
Apache2 SuPHP - Versijų istorija
2026-04-19T09:05:06Z
Šio puslapio versijų istorija projekte
MediaWiki 1.35.1
https://wiki.eofnet.lt/w//index.php?title=Apache2_SuPHP&diff=8408&oldid=prev
\dev\null 13:05, 26 rugpjūčio 2017
2017-08-26T13:05:51Z
<p></p>
<p><b>Naujas puslapis</b></p><div>[[Vaizdas:Suphp logo.png|miniatiūra]]<br />
== Apache2 su PHP5 (suphp) diegimas ==<br />
<br />
Testuota: [[GNU]]/[[Debian]] sistemoje<br />
<br />
Apache2 diegimas su [[php]] veikiančiu kaip atskiras [[CGI]] procesas ([[fcgi]] posistemė), įgalinantis veikti [[php]] scriptus atskiriant vartotojų teisias. Kiekvienas [[php]] procesas leidžiamas pagal vartotojo ID kuriam jis priklauso. Taip užtikrinamas saugesnis [[PHP]] scriptų naudojimas įvairiose sistemose. [[PHP]] skriptai negali pasiekti failų/resursų kurie jiems nepriklauso arba nėra toje pačioje vartotojų grupėje, taip neįtakojant bendro sistemos pažeidžiamumo ir t.t.<br />
<br />
== Diegimas GNU/Debian sistemoje ==<br />
<br />
[[apt-get]] install apache2 apache2-data apache2-utils ssl-cert apache2-bin libapache2-mod-suphp libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.1-0 libonig2 libperl4-corelibs-perl lsof php5-cgi php5-cli php5-common php5-json php5-readline suphp-common libexpat1 php5-gd php5-mysql php5-imap php-pear php-auth php5-mcrypt mcrypt php5-imagick imagemagick php5-curl php5-intl php5-ming php5-ps php5-pspell php5-recode php5-sqlite php5-tidy php5-xmlrpc php5-xsl<br />
<br />
<br />
== Diegimas suphp nepalaikančioje sistemoje su naujesniu apache ==<br />
<br />
apt-get install apache2-dev build-essential autoconf automake libtool flex bison debhelper binutils<br />
cd /usr/local/src<br />
wget <nowiki>http://suphp.org/download/suphp-0.7.2.tar.gz</nowiki><br />
tar zxvf suphp-0.7.2.tar.gz<br />
<nowiki>wget -O suphp.patch https://lists.marsching.com/pipermail/suphp/attachments/20130520/74f3ac02/attachment.patch</nowiki><br />
patch -Np1 -d suphp-0.7.2 < suphp.patch<br />
cd suphp-0.7.2<br />
autoreconf -if<br />
./configure --prefix=/usr/ --sysconfdir=/etc/suphp/ --with-apr=/usr/bin/apr-1-config --with-apache-user=www-data --with-setid-mode=owner --with-logfile=/var/log/suphp/suphp.log<br />
make<br />
make install<br />
mkdir /var/log/suphp<br />
mkdir /etc/suphp<br />
echo "LoadModule suphp_module /usr/lib/apache2/modules/mod_suphp.so" > /etc/apache2/mods-available/suphp.load<br />
<br />
== Paruošimas ==<br />
Įgalinam modulius:<br />
a2enmod suexec rewrite ssl actions include suphp<br />
<br />
Pakeitimai /etc/apache2/mods-available/suphp.conf faile pvz.:<br />
<IfModule mod_suphp.c><br />
#<FilesMatch "\.ph(p3?|tml)$"><br />
# SetHandler application/x-httpd-suphp<br />
#</FilesMatch><br />
AddType application/x-httpd-suphp .php .php3 .php4 .php5 .phtml<br />
suPHP_AddHandler application/x-httpd-suphp<br />
<Directory /><br />
suPHP_Engine on<br />
</Directory><br />
# By default, disable suPHP for debian packaged web applications as files<br />
# are owned by root and cannot be executed by suPHP because of min_uid.<br />
<Directory /usr/share><br />
suPHP_Engine off<br />
</Directory><br />
# # Use a specific php config file (a dir which contains a php.ini file)<br />
# suPHP_ConfigPath /etc/php5/cgi/suphp/<br />
# # Tells mod_suphp NOT to handle requests with the type .<br />
# suPHP_RemoveHandler <br />
</IfModule><br />
<br />
Pakeitimai /etc/passwd (keičiame 33 id į 3333) viskas turi atrodyti maždaug taip:<br />
# cat /etc/passwd|grep www-data <br />
www-data:x:3333:3333:www-data:/var/www:/usr/sbin/nologin<br />
<br />
<br />
Pakeitimai /etc/group (keičiame 33 id į 3333) viskas turi atrodyti maždaug taip:<br />
# cat /etc/group|grep www-data<br />
www-data:x:3333:<br />
Pakeičiame teises /var/www/html<br />
chown -R www-data:www-data /var/www/html<br />
Taip pat keičiame /etc/suphp/suphp.conf (min_uid, min_gid) pavyzdys.:<br />
[global]<br />
;Path to logfile<br />
logfile=/var/log/suphp/suphp.log <br />
;Loglevel<br />
loglevel=info<br />
;User Apache is running as<br />
webserver_user=www-data<br />
;Path all scripts have to be in<br />
docroot=/var/www:${HOME}/public_html<br />
;Path to chroot() to before executing script<br />
;chroot=/mychroot<br />
; Security options<br />
allow_file_group_writeable=false<br />
allow_file_others_writeable=false<br />
allow_directory_group_writeable=false<br />
allow_directory_others_writeable=false<br />
;Check wheter script is within DOCUMENT_ROOT<br />
check_vhost_docroot=true<br />
;Send minor error messages to browser<br />
errors_to_browser=false<br />
;PATH environment variable<br />
env_path="/bin:/usr/bin"<br />
;Umask to set, specify in octal notation<br />
umask=0077<br />
; Minimum UID<br />
'''min_uid=1000'''<br />
; Minimum GID<br />
'''min_gid=1000'''<br />
[handlers]<br />
;Handler for php-scripts<br />
application/x-httpd-suphp="php:/usr/bin/php-cgi"<br />
;Handler for CGI-scripts<br />
x-suphp-cgi="execute:!self"<br />
<br />
Pagaliau paleidžiame Apache2<br />
systemctl start apache2<br />
<br />
[[Category:Debian]]<br />
[[Category:Linux]]<br />
[[Category:Tinklas]]<br />
[[Category:Ubuntu]]<br />
[[Category:Httpd]]<br />
[[Category:Saugumas]]<br />
[[Category:CentOS]]<br />
[[Category:Gentoo]]<br />
[[Category:Fedora]]<br />
[[Category:Redhat]]<br />
[[Category:FreeBSD]]</div>
\dev\null