BSD Ports

www/suphp 0.7.2_2 FreeBSD

Securely execute PHP scripts under Apache

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
License
GPLv2
Categories
www
Package size
73.9 KiB, 219.5 KiB installed

Description

suPHP is a combination of an Apache module (mod_suphp) and an executable which provides a wrapper for PHP. With both together, it is possible to execute PHP scripts with the permissions of their owner without having to place a PHP binary in each user's cgi-bin directory. suPHP doesn't need Apache's suExec, provides a logging function and support for different php.ini's.

In the other systems

SystemPortVersion
FreeBSDwww/suphp0.7.2_2
DragonFlywww/suphp0.7.2_2

Install

Binary package:

pkg install suphp-php82

From the ports tree:

cd /usr/ports/www/suphp/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	suphp-php82>0:www/suphp

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest0.7.2_20.7.2_20.7.2_20.7.2_20.7.2_2
FreeBSD:14:quarterly0.7.2_20.7.2_2n/a0.7.2_20.7.2_2
FreeBSD:15:latest0.7.2_20.7.2_2n/a0.7.2_20.7.2_2
FreeBSD:15:quarterly0.7.2_20.7.2_2n/an/an/a
FreeBSD:16:latest--n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

The Makefile names none itself; they come from USES and USE_*.

The full lists below include those, and their dependencies in turn.

Build dependencies 25
Run dependencies 22

No port depends on this one.

Configuration

Options name: www_suphp

OptionDefaultDescription
DOCSoffBuild and/or install documentation
USES
apache autoreconf cpe libtool php:cgi,flavors
Service scripts
none
Flavors
suphp-php83-0.7.2_2, suphp-php84-0.7.2_2, suphp-php85-0.7.2_2, suphp-php86-0.7.2_2

Message after installing

SuPHP has no upstream maintainer and thus is not actively having
bugs and security issues addressed.

Its security track record is pretty good. The worst so far has been
privilege escalation to the httpd user, which is no worse than not
using SuPHP.

It is advisable to convert your system to PHP-FPM if possible.

The port maintainer's thoughts on sandboxing PHP are here:

  http://blog.shatow.net/post/2013-07-17-sandboxing-php-part1.markdown

An overview of using PHP-FPM for application sandboxing is here:

  http://blog.shatow.net/post/2013-11-27-sandboxing-php-part2.markdown

Files

pkg-plist 12
  • sbin/suphp
  • etc/suphp.conf-example
  • %%APACHEMODDIR%%/mod_suphp.so
  • @postexec %D/sbin/apxs -e -a -n suphp %D/%f
  • @preunexec %D/sbin/apxs -e -A -n suphp %D/%f
  • share/doc/suphp-php82/INSTALL
  • share/doc/suphp-php82/LICENSE
  • share/doc/suphp-php82/README
  • share/doc/suphp-php82/CONFIG
  • share/doc/suphp-php82/apache/CONFIG
  • share/doc/suphp-php82/apache/INSTALL
  • share/doc/suphp-php82/apache/README
distinfo 1
FileSizeSHA256
suphp-0.7.2.tar.gz343223e09d4d73a552f4a5bb46961ac7e7ea61c5c24757a8b80d8d770e4c7ed6519760
Master sites 3
  • http://www.suphp.org/download/
  • LOCAL/bdrewery/suphp/
  • http://mirror.shatow.net/freebsd/suphp/

Commit history 0

No commits in the history this site was built from.