4 ms·
Have you ever configured a secure setup for php+httpd? Because it is much easier to deploy a secure userspace python app outside of context of webserver and jus
by ergo14 10y ago
Have you ever configured a secure setup for php+httpd?
Because it is much easier to deploy a secure userspace python app outside of context of webserver and just proxy to it.
- fredsted 10y agoJust run php cgi/fpm as another user? What am I missing?
- ergo14 10y agoOpen basedir config, separate /tmp, insecure function blacklisting... tons of stuff, php-fpm is the starting point - yes. It takes much more manual work to set everything correctly than running a python application.