Re: [ubuntu-uk] PHP security

2010-06-16 Thread Chris Rowson
>> Please feel free to point out any errors etc. I might work this into a >> how to and publish it on the 'tinterweb (of course giving proper >> attribution to folk such as Tyler) as instructions on how to do this >> seem to be spread across quite a few sites. > > I'm glad you solved it, Chris! Con

Re: [ubuntu-uk] PHP security

2010-06-15 Thread Tyler J. Wagner
On Tuesday 15 June 2010 21:04:38 Chris Rowson wrote: > Please feel free to point out any errors etc. I might work this into a > how to and publish it on the 'tinterweb (of course giving proper > attribution to folk such as Tyler) as instructions on how to do this > seem to be spread across quite a

Re: [ubuntu-uk] PHP security

2010-06-15 Thread Chris Rowson
>>> Here's the my current level of understanding! If anyone can fill in >>> the gaps (or correct me if I'm wrong) I'd be really grateful. >> >> (snipped for brevity) >> >> Your stated understanding is correct, as far as I know it. >> >>> What I'm still hazy on is this: >>> >>> cgi is slower than fa

Re: [ubuntu-uk] PHP security

2010-06-12 Thread Chris Rowson
On Sat, Jun 12, 2010 at 6:50 AM, Tyler J. Wagner wrote: > On Friday 11 June 2010 23:17:07 Chris Rowson wrote: >> >> That's easy. Again, webmin + virtualmin will set it up for each >> >> domain/account pretty easily. But here are the packages you need: >> >> Also, unfortunately there's no Lucid ins

Re: [ubuntu-uk] PHP security

2010-06-11 Thread Tyler J. Wagner
On Friday 11 June 2010 23:17:07 Chris Rowson wrote: > >> That's easy. Again, webmin + virtualmin will set it up for each > >> domain/account pretty easily. But here are the packages you need: > > Also, unfortunately there's no Lucid installer yet for virtualmin. I > might have a look at what's inv

Re: [ubuntu-uk] PHP security

2010-06-11 Thread Chris Rowson
>> That's easy. Again, webmin + virtualmin will set it up for each >> domain/account >> pretty easily. But here are the packages you need: Also, unfortunately there's no Lucid installer yet for virtualmin. I might have a look at what's involved in installing it from scratch. Chris -- ubuntu-uk

Re: [ubuntu-uk] PHP security

2010-06-11 Thread Chris Rowson
>> Here's the my current level of understanding! If anyone can fill in >> the gaps (or correct me if I'm wrong) I'd be really grateful. > > (snipped for brevity) > > Your stated understanding is correct, as far as I know it. > >> What I'm still hazy on is this: >> >> cgi is slower than fastcgi beca

Re: [ubuntu-uk] PHP security

2010-06-11 Thread Tyler J. Wagner
On Friday 11 June 2010 17:47:08 Chris Rowson wrote: > Here's the my current level of understanding! If anyone can fill in > the gaps (or correct me if I'm wrong) I'd be really grateful. (snipped for brevity) Your stated understanding is correct, as far as I know it. > What I'm still hazy on is t

Re: [ubuntu-uk] PHP security

2010-06-11 Thread Chris Rowson
>>> I'm migrating a web server with a few sites from a CentOS based VPS >>> with a DirectAdmin control panel to an Ubuntu Lucid server. I'm not >>> incredibly bothered about losing the control panel, but I wondered if >>> anyone had any advice on securing PHP scripts so that scripts owned by >>> se

Re: [ubuntu-uk] PHP security

2010-06-10 Thread Tyler J. Wagner
On Thursday 10 June 2010 23:19:28 Chris Rowson wrote: > I'm migrating a web server with a few sites from a CentOS based VPS > with a DirectAdmin control panel to an Ubuntu Lucid server. I'm not > incredibly bothered about losing the control panel, but I wondered if > anyone had any advice on securi

[ubuntu-uk] PHP security

2010-06-10 Thread Chris Rowson
Hello server admins! I'm migrating a web server with a few sites from a CentOS based VPS with a DirectAdmin control panel to an Ubuntu Lucid server. I'm not incredibly bothered about losing the control panel, but I wondered if anyone had any advice on securing PHP scripts so that scripts owned by

Re: [ubuntu-uk] PHP security

2010-06-10 Thread Chris Rowson
>> I'm migrating a web server with a few sites from a CentOS based VPS >> with a DirectAdmin control panel to an Ubuntu Lucid server. I'm not >> incredibly bothered about losing the control panel, but I wondered if >> anyone had any advice on securing PHP scripts so that scripts owned by >> separat