HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   Server Operation (http://www.howtoforge.com/forums/forumdisplay.php?f=5)
-   -   Apache + PHP (http://www.howtoforge.com/forums/showthread.php?t=37)

lola 25th April 2005 12:35

Apache + PHP
 
I found out that if I disable the PHP module in my Apache Apache delivers all PHP pages in plain text so that everyone can read secret information like database passwords, etc. I have enabled the PHP module again, and it's working fine, but what if the module fails for some reason? Is there a way to tell Apache to not deliver PHP pages at all if the PHP module is not available?

lola

jojo 25th April 2005 13:41

I had to set up a Wikimedia Wiki once, and it needs the same feature for certain directories for security reasons. I had to put the following lines in the virtual host container in my httpd.conf:

Code:

<IfModule !mod_php4.c>
    <Files ~ '.php$'>
        Order allow,deny
        Deny from all
        Allow from none
    </Files>
    <Files ~ '.phps'>
        Order deny,allow
        Allow from all
    </Files>
</IfModule>

That's for Apche 1.3 and PHP4. If you use Apache 2.0, use

Code:

<IfModule !sapi_apache2.c>
instead of

Code:

<IfModule !mod_php4.c>
And don't forget to restart your Apache! ;)

jojo


All times are GMT +2. The time now is 21:16.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.