www/suphp 0.7.2_2 DragonFly

Securely execute PHP scripts under Apache

System: DragonFly
Repository: DPorts
Maintainer: [email protected] (as in FreeBSD)
License: GPLv2
Categories: www
Package size: 76.9 KiB, 253.1 KiB installed

Description

suPHP is a combination of an Apache module (mod_suphp) and an executable which provides a wrapper for PHP. With both together, it is possible to execute PHP scripts with the permissions of their owner without having to place a PHP binary in each user's cgi-bin directory. suPHP doesn't need Apache's suExec, provides a logging function and support for different php.ini's.

In the other systems

System

Port

Version

DragonFly

www/suphp

0.7.2_2

FreeBSD

www/suphp

0.7.2_2

Install

Binary package:

pkg install suphp-php81

From DPorts:

cd /usr/dports/www/suphp && make install clean

Dependencies

Run dependencies 2

No port depends on this one.

Configuration

No options to configure.

Service scripts: none
Flavors: suphp-php82-0.7.2_2, suphp-php83-0.7.2_2, suphp-php84-0.7.2_2

Message after installing

SuPHP has no upstream maintainer and thus is not actively having
bugs and security issues addressed.

Its security track record is pretty good. The worst so far has been
privilege escalation to the httpd user, which is no worse than not
using SuPHP.

It is advisable to convert your system to PHP-FPM if possible.

The port maintainer's thoughts on sandboxing PHP are here:

  http://blog.shatow.net/post/2013-07-17-sandboxing-php-part1.markdown

An overview of using PHP-FPM for application sandboxing is here:

  http://blog.shatow.net/post/2013-11-27-sandboxing-php-part2.markdown