From owner-freebsd-ports@FreeBSD.ORG Sun Jun 10 01:45:10 2007 Return-Path: X-Original-To: freebsd-ports@freebsd.org Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id E945716A46D; Sun, 10 Jun 2007 01:45:10 +0000 (UTC) (envelope-from chris@vindaloo.com) Received: from corellia.vindaloo.com (corellia.vindaloo.com [64.51.148.100]) by mx1.freebsd.org (Postfix) with ESMTP id B9A3D13C457; Sun, 10 Jun 2007 01:45:10 +0000 (UTC) (envelope-from chris@vindaloo.com) Received: from [172.24.145.69] (endor.vindaloo.com [172.24.145.69]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by corellia.vindaloo.com (Postfix) with ESMTP id BFDA55D13; Sat, 9 Jun 2007 21:45:05 -0400 (EDT) Message-ID: <466B579F.2080106@vindaloo.com> Date: Sat, 09 Jun 2007 21:45:03 -0400 From: Christopher Hilton User-Agent: Thunderbird 1.5.0.12 (Macintosh/20070509) MIME-Version: 1.0 To: Jonathan Horne References: <466B17E6.9000906@vindaloo.com> <49217.192.168.125.81.1181426436.squirrel@webmail.dfwlp.org> In-Reply-To: <49217.192.168.125.81.1181426436.squirrel@webmail.dfwlp.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: bob@a1poweruser.com, User Questions , freebsd-ports@freebsd.org Subject: Re: Php5 port and Apache Module X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 10 Jun 2007 01:45:11 -0000 Jonathan Horne wrote: >> Bob wrote: >>> The php4 & php5 port apache module used to be default before FBSD 6.0. >>> Many people before you on this list have wanted the php4/5 apache module >>> turned back on as default but so far the port maintainer has not done >>> anything >>> in any way of justifying removing the apache module from the default setting >>> or re-enable it as the default. [snip] > > seems like it was removed from the default config of lang/php5 for security > reasons. many people who do build php5 do not need the apache module, so no > sense building it if its not needed. > > cd /usr/ports/lang/php5 > make config > (edit your choices) > make deinstall > make reinstall > > its just one of those things that you learn to live with after a while. > Everyone seems to be misunderstanding my question. I'm aware of how to build mod_php5. I'm curious about why the default configuration builds php5 as a standalone CLI and CGI rather than as an apache module. I'm assuming that there is some good engineering behind this decision but I'd like to know a little more about that engineering. Is there some advantage to running php as a Fast CGI process? -- Chris P.S. Sorry Bob, I've scanned the commit logs for the port and there is no mention of security problems with mod_php5.so. To tell the truth I cannot imagine that there would be any security issues in mod_php5.so that didn't also exist in /usr/local/bin/php-cgi. I could be wrong here though and then I would have the answer to my question. -- __o "All I was doing was trying to get home from work." _`\<,_ -Rosa Parks ___(*)/_(*)___________________________________________________________ Christopher Sean Hilton pgp key: D0957A2D/f5 30 0a e1 55 76 9b 1f 47 0b 07 e9 75 0e 14