Practical Apache, PHP-FPM & Nginx Reverse Proxy: How to Build a Secure, Fast and Powerful Webserver from scratch (Practical Guide Series Book 3) by Adrian Ling

Author:Adrian Ling [Ling, Adrian]
Language: eng
Format: epub
Tags: PHP-FPM, Apache, Nginx Reverse Proxy
Published: 2015-05-03T04:00:00+00:00

That simple 1-liner will display the entire content of the password file! Take a look:

NOTE: This is the DEFAULT settings in PHP in 90% of all the web-servers!

To prevent this from happening, we need to lock down our PHP settings by editing the main configuration file - /etc/php.ini

1. Disable System Functions

The most important step is to disable all the 'dangerous' system functions. Open the php.ini file and look for: disable_functions =

The default value is empty, meaning, PHP can run any commands that a normal system user can. Replace that line with:

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.