ISPConfig + Turck MMCache + Hardened-PHP - Any Issues?

[BobbyQ]

First of all a BIG THANKS for the brilliant 'perfect debian-sarge setup' and this great software! Runs smooth on the first try! Great job you're doing here guys!

As my last Server was hijacked through a open PHP bug in within a dead project that still was accessible through web, I learned a lesson...
so I thought of this time adding a bit more general security installing the hardened-php patch from here: http://www.hardened-php.net/.

Anyone has this running on his ISPConfig Server already?
Are there any known issues with this combination?

Furthermore I always used Turck MM Cache to speed up all the PHP stuff (and PHP-code is what I mainly have running on the different webs...) that is available from here: http://turck-mmcache.sourceforge.net/

So the same questions here, anyone has this running on his ISPConfig Server already? Are there any known issues?

Thanks in advance for any info!

[falko]

Originally Posted by BobbyQ

Furthermore I always used Turck MM Cache to speed up all the PHP stuff (and PHP-code is what I mainly have running on the different webs...) that is available from here: http://turck-mmcache.sourceforge.net/

So the same questions here, anyone has this running on his ISPConfig Server already? Are there any known issues?

I used Turck MM Cache on my server without any problems, but this project seems to be dead, so I'm using its successor eAccelerator now: http://eaccelerator.net

[BobbyQ]

Oh didn't even notice it has been discontinued, thank you! Will have a look...

[IntnsRed]

Originally Posted by falko

so I'm using its successor eAccelerator now: http://eaccelerator.net

Just curious, since I've never messed around with eAccelerator and was just reading its web page. Are you using this in a production environment? How stable does it seem?
________
Toyota hz engine history

[falko]

Originally Posted by IntnsRed

Just curious, since I've never messed around with eAccelerator and was just reading its web page. Are you using this in a production environment?

Yes. HowtoForge uses eAccelerator.

Originally Posted by IntnsRed

How stable does it seem?

Seems to be pretty stable. And reduces the server load a lot!

[tom]

Originally Posted by falko

Yes. HowtoForge uses eAccelerator.

Seems to be pretty stable. And reduces the server load a lot!

What'a about using hardened-php whis ISPC?
Did someome picked up some experiences?

tom

[falko]

What is a hardened PHP?

[tom]

Originally Posted by falko

What is a hardened PHP?

"The Hardening-Patch is a patchset that adds security hardening features to PHP to protect your servers on the one hand against a number of well known problems in PHP applications and on the other hand against potential unknown vulnerabilities within those applications or the PHP core itself." Have a look here:
http://www.hardened-php.net/index.14.html

tom

[falko]

I have no experience with this so I can't be of much help here...