Re: Apache 2 news
| From: | Aaron Bannert | Date: | Thu, 11 Apr 2002 18:33:19 +0000 |
| Subject: | Re: Apache 2 news | ||
| References: | 1 2 3 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-82617@lists.php.net to get a copy of this message | ||
> > What kind of security issues are you refering to? We're not quite ready
> > for full Apache 2 support, but I hope to have all known issues fixed
> > today (in the next couple hours).
>
> You can run PHP in module, while you can specify the user name
> used by PHP for executing the scripts. That's new, and so you
> need not use CGI. This is the major advantage of using PHP CGI
> with Apache, instead of the module, in the current Apache
> versions, with setuid.
I believe what you are refering to is the perchild MPM. The perchild MPM
is still totally experimental, and doesn't compile on most platforms.
For now, PHP scripts run under the apache2filter are still run as the
UID of the child process (whatever was in "User" directive).
-aaron