HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)

- Server Operation (http://www.howtoforge.com/forums/forumdisplay.php?f=5)

- - Apache + PHP (http://www.howtoforge.com/forums/showthread.php?t=37)

I found out that if I disable the PHP module in my Apache Apache delivers all PHP pages in plain text so that everyone can read secret information like database passwords, etc. I have enabled the PHP module again, and it's working fine, but what if the module fails for some reason? Is there a way to tell Apache to not deliver PHP pages at all if the PHP module is not available?

lola

I had to set up a Wikimedia Wiki once, and it needs the same feature for certain directories for security reasons. I had to put the following lines in the virtual host container in my httpd.conf:

Code:

<IfModule !mod_php4.c>

    <Files ~ '.php$'>

        Order allow,deny

        Deny from all

        Allow from none

    </Files>

    <Files ~ '.phps'>

        Order deny,allow

        Allow from all

    </Files>

</IfModule>

That's for Apche 1.3 and PHP4. If you use Apache 2.0, use

Code:

<IfModule !sapi_apache2.c>

instead of

Code:

<IfModule !mod_php4.c>

And don't forget to restart your Apache! ;)

jojo