PDA

View Full Version : ISPConfig + Turck MMCache + Hardened-PHP - Any Issues?

BobbyQ
1st December 2005, 21:50
First of all a BIG THANKS for the brilliant 'perfect debian-sarge setup' and this great software! Runs smooth on the first try! Great job you're doing here guys!

As my last Server was hijacked through a open PHP bug in within a dead project that still was accessible through web, I learned a lesson...
so I thought of this time adding a bit more general security installing the hardened-php patch from here: http://www.hardened-php.net/.

Anyone has this running on his ISPConfig Server already?
Are there any known issues with this combination?

Furthermore I always used Turck MM Cache to speed up all the PHP stuff (and PHP-code is what I mainly have running on the different webs...) that is available from here: http://turck-mmcache.sourceforge.net/

So the same questions here, anyone has this running on his ISPConfig Server already? Are there any known issues?

Thanks in advance for any info!
falko
2nd December 2005, 00:02
Furthermore I always used Turck MM Cache to speed up all the PHP stuff (and PHP-code is what I mainly have running on the different webs...) that is available from here: http://turck-mmcache.sourceforge.net/

So the same questions here, anyone has this running on his ISPConfig Server already? Are there any known issues?

I used Turck MM Cache on my server without any problems, but this project seems to be dead, so I'm using its successor eAccelerator now: http://eaccelerator.net
BobbyQ
2nd December 2005, 01:17
Oh didn't even notice it has been discontinued, thank you! Will have a look...
IntnsRed
2nd December 2005, 23:55
so I'm using its successor eAccelerator now: http://eaccelerator.net

Just curious, since I've never messed around with eAccelerator and was just reading its web page. Are you using this in a production environment? How stable does it seem?
falko
3rd December 2005, 02:20
Just curious, since I've never messed around with eAccelerator and was just reading its web page. Are you using this in a production environment?
Yes. HowtoForge uses eAccelerator. :)

How stable does it seem? Seems to be pretty stable. And reduces the server load a lot! :)
tom
3rd May 2006, 21:55
Yes. HowtoForge uses eAccelerator. :)

Seems to be pretty stable. And reduces the server load a lot! :)

What'a about using hardened-php whis ISPC?
Did someome picked up some experiences?

tom
falko
3rd May 2006, 23:12
What is a hardened PHP?
tom
3rd May 2006, 23:35
What is a hardened PHP?

"The Hardening-Patch is a patchset that adds security hardening features to PHP to protect your servers on the one hand against a number of well known problems in PHP applications and on the other hand against potential unknown vulnerabilities within those applications or the PHP core itself." Have a look here:
http://www.hardened-php.net/index.14.html

tom
falko
3rd May 2006, 23:52
I have no experience with this so I can't be of much help here... :(