note 37173 added to security.index

You can chroot whole apache installation, run it on unrestricted port (i.e. 8080) and use any proxy (i.e. squid) as a frontend for it. The problem is, that You should build it statically if You want it really secure. This makes a lot of administrative work with day-2-day management. You have to choose how important the security is for You. We made several installation of PHP & APACHE in chrooted environment for our customers, but always overhead of administrative job was huge. ---- Manual Page -- http://www.php.net/manual/en/security.index.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+37173 Delete -- http://master.php.net/manage/user-notes.php?action=delete+37173&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+37173&report=yes Search -- http://master.php.net/manage/user-notes.php