Re: new security related directive for php-4.3.4
| From: | Derick Rethans | Date: | Fri, 19 Mar 2004 22:06:25 +0000 |
| Subject: | Re: new security related directive for php-4.3.4 | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-8629@lists.php.net to get a copy of this message | ||
On Fri, 19 Mar 2004, Rasmus Lerdorf wrote:
> On Fri, 19 Mar 2004, Ilia Alshanetsky wrote:
> >
> > Because it would break BC. When these options were developed Apache 2 was not
> > around and fastcgi support was flimsy at best. Using plain CGI (which MANY
> > ISPs use) to run PHP is quite resource intensive.
>
> Ilia, come back to reality man! Are you really suggesting that people use
> Apache2 with the perchild MPM to solve this problem?
There is also something as mod_suid:
http://www.jdimedia.nl/igmar/mod_suid/
(note, Apache only starts as root, the requests are not handled as root
of course).
Derick