Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 10 Feb 2005 11:45:50 +0100 (CET)
From:      Mikolaj Rydzewski <miki@ceti.pl>
To:        freebsd-isp@freebsd.org
Subject:   Multiple instances of apache+php
Message-ID:  <Pine.LNX.4.44.0502101128110.11879-100000@tau.ceti.pl>

next in thread | raw e-mail | index | archive | help
Hello,

To 'harden' my apache/php installation I'd like to run something like 
this:

- apache/php without limitations serving trusted web pages (i.e. from 
/usr/local/www)
- requests for users' pages tunneled via mod_rewrite to another apache/php 
working under different uid on localhost only (with safe_mode, 
open_basedir, and so on) 

This would allow me to run trusted applications without limitations of
safe_mode, disabled functions, etc, and disallow users i.e. from reading
my database passwords from scripts.

The problem is I haven't got any idea how to supply different path to
php.ini for second instance of apache (its location is defined at compile
time). I don't want to install apache/php twice to different locations.
I'd rather install it 'the right way' from ports and use two sets of
configuration files. 

I could tweak startup scripts to change php.ini just before starting
second instance of apache (this file is read once, just after start), but
such hack doesn't sound nice to me ;-)

Any ideas?

-- 
Mikolaj Rydzewski       <miki@ceti.pl>       http://ceti.pl/~miki/
                     PGP KeyID: 8b12ab02
There are three kinds of people: men, women, and unix.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.44.0502101128110.11879-100000>