Re: advice request for shared hosting and security issue

Thomas Goirand <[email protected]> Mon, 24 Jun 2013 22:38:00 +0800

Newsgroups	gmane.linux.debian.user.isp
Organization	Debian
Message-ID	<[email protected]>

On 06/24/2013 02:14 PM, Oğuz Yarımtepe wrote:
> 
> 
> 
> On Mon, Jun 24, 2013 at 12:37 AM, Darryl Ware <[email protected]
> <mailto:[email protected]>> wrote:
> 
>     Would apparmor be of any use in this instance?
> 
> 
> I solved this isseu by completely removing php-fpm and fastcgi and just
> using mod_php. Added php_admin_value open_basedir path fr each vhost.

Great, you now have a security hole, using a deprecated directive, which
is removed in the current stable version of PHP!

> Everything is fine for now.

Until a hacker has a go with your server...

Thomas