Apache and PHP Security Scans

I am now required to keep up with the latest versions of Apache and PHP on my Xserves for security reasons. Is there an easy way to do this?

In order to keep up with security updates you'll have to install your own apache and php and stop using the ones that comes with Mac OS X (i think it is a good idea to do that anyway).
Fortunately there are tools out there that will help you.
I use macports, (http://macports.org) but if you decide to use it you will no longer be able to start, stop and control apache from the Server Admin interface. (there is actually a way to continue to do it but it will break at any system update you run).
If you are comfortable controlling the server with the command line you'll like it very much and at the end feel it is a great improvement over the apache/php that ships with OS X.
There is also Fink (http://www.finkproject.org/) but i have never used it so i can't say if it will work well or not and i'm sure it will also prevent you from using the Server Admin.
Good luck.

Similar Messages

How to uninstall default Apache and PHP

I use Lion 10.8.2。Now i want to uninstall default Apache and PHP。But i don't how to do it . Because i want to use nginx and update php to 5.4 or new.
Than you very much.

2. If I want to retrieve information from the database
and display the information in the applet, what should
I do then ?
You would read the response given by the PHP side and parse it. How this is done depends on how PHP returns the data. It should preferrably be plain text or some other simple format, not HTML.
Another problem is, when I tried to send a HTTP request, I get an exception :
access denied ( java.net.SocketPermission "the host name") resolve
What is that and how do I solve the problem ?What applets are allowed to do is severly restricted because they are loaded and started by a web browser when a user visits a web page without consulting the user. You wouldn't like some site delete all files on your hard drive while you're browsing the web. Opening network connections to servers other than where the applet was originally downloaded from is another thing that is not allowed.
There are two ways to solve this: put the php script and the applet on the same server, or sign the applet. Signing an applet means assuring the user that the applet won't do anything bad and that it's ok to allow it to do something that would otherwise be forbidden, here's an example:
http://java.sun.com/security/signExample12/signedPluginEx.html

About building Apache and PHP from source

Hello,
I figured my question should be posted here, if it should be done somewhere else, I apologize.
I'm in the process of exploring solaris 9 (I have RH5 - 9, FC1-3 and FreeBSD 4.7> experience). I was wondering which tools I need to build stuff from source, like Apache and PHP. I am aware of www.sunfreeware.com, which helped me out with mc and other useful stuff.
The problem I see is that when I install packages from sunfreeware.com, I must rely on the package maintainer to release a new package for newer Apache/PHP versions (with bug/security fixes in it). I plan to run a public webserver on this config, so I figured it'd be best to build what I need from the source so I can update it anytime I like.
What I installed from sunfreeware.com:
autconf
automake
gcc
make
bison
expect
mc
libiconv
ncurses
flex
What else do I need to successfully build software from the source?
Are there any people running a public web/dns/mailserver on Solaris (whatever the version)?
If someone could answer to those questions, I'd be most grateful.
Bas

Have you installed the companion CD? All you need is there.
Have you tried to compile?
If so, what errors do you get?

Need Urgent Help with Apache and PHP

I have been struggling with apache and php for a week now and I finally broke down to post a message.
I have apache 1.3 running on my mac mini g4 with 10.4.9 and I installed sql. I went to the entropy website and downloaded php5 to install without knowing I already had php4 on the machine. I installed 5 but could not get it to work. I then went back to httpd.conf and tried to install php4 by uncommenting out the loadmodule and addmodule lines. I restarted apache but php still did not work. I tested the phpinfo.php script but all I got was the script in Safari and not the actual page. At the moment, I have php4 and php5 on my machine but can't get either one to work. I am sure there is an easy fix but I don't know it. Please help.

The problem is not terribly complicated, but Apache will not start with the entropy file in the folder
/etc/httpd/users/
Let me experiment on you. Rename the entropy file and then try to start Apache. To do this, open Terminal and paste this command:
<pre>sudo mv /etc/httpd/users/+entropy.conf /etc/httpd/users/+entropy<pre>
Now check the Apache configuration:
<pre>apachectl configtest<pre>
If it says "Syntax OK", start Apache:
<pre>sudo apachectl start<pre>
Since we only disabled the entropy file, you should be able to enable PHP5 with some more advanced configuring.

Apache and PHP update causes an error

Apple update downloaded updates for apache and php, since then I cant get to work my squirrel mail, because web wont start if it has the php plugin enabled, any help or suggestions ???

Shxnnxn please see Error downloading Creative Cloud applications - http://helpx.adobe.com/creative-cloud/kb/error-downloading-cc-apps.html for information on how to resolve Error 49.

I have downloaded MAMP for Mac and want to use it for working with Wordpress. I had mysql installed before this and would like to uninstall it and use MAMP. It was easy to turn off Apache and PHP but don't know how to uninstall mysql. Please help!!

I have downloaded MAMP for Mac and want to use it for working with Wordpress. I'm on an Imac with Maverick OS 10.9. I had mysql installed before this and would like to uninstall it and use MAMP. It was easy to turn off Apache and PHP but don't know how to uninstall mysql. Please help!!

It depends on how you installed it. You have to shutdown the MySQL service first. If you used the standard, but obsolete Startup Item, you can do that with the Startup Item. If you created a launchd script, you can do it with launchctl. Once MySQL is no longer running, you can delete the Startup Item or launchd script and the rest of MySQL.

Can I manage custom builds of Apache and PHP with Server Admin?

Okay, here's the deal: I have a shiny new Xserver Xeon with Leopard Server installed. I see that it comes with a number of programs that I'll need, preinstalled, but for various reasons (extensions and modules for PHP, Apache, and the like), I may need to roll my own builds of several of these programs and libraries. In this case, the main thing I'm concerned with is recompiling Apache and PHP.
My question is, can I do this and still manage those tools from Server Admin? I'm not averse to doing it on the command line if need be, but I'd just as soon not have to, if I have Server Admin. So, what would I need to do to make sure that I can still use Server Admin with a custom PHP and Apache?

My main interest is in using Wiki Server with the custom Apache and PHP builds. Since that's managed through Server Admin, I figured it would be best to try and integrate with the Apple tools.
Apache I could maybe get by without a rebuild, but there are definitely PHP modules I need which the default build does not come with.

Apache and PHP not working together

Hey all,
Ok, I reinstalled my server yesterday and followed the LAMP wiki to set up Apache, MySQL, and PHP. Now, I got Apache and MySql working great, but when I go to directory that has a .php file to open, my brower is asking me what application I want to open with the file.
I have set up this to handle the docuemtns:
DirectoryIndex index.php index.phtml index.html
AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps
and still no go.
Anyone got this to work?
Thanks!!!
Joe

cactus wrote:
http://bbs.archlinux.org/viewtopic.php?t=15596
Check and see if what I said in my last post is happening to you as well...
Yeah, I checked and the path is correct...
Maybe I should just reinstall it?
Thanks!!!

Apache and PHP upgrade

I'm sure there was a Darwin section once-upon-a-time but I don't see it so am posting here for advice. I want to install Apache 2.2.0 and PHP 5.1.2 but as Apple doesn't yet include these upgrades I'd like to keep them seapate from existing installs. Would installing in usr/local be the reasonable place for installation and has anyone here done this install?

I posted an answer to your question here:
http://discussions.apple.com/message.jspa?messageID=2000747#2000747
Not sure which of these threads is the real you! If you posted under two different pseudonyms and are able to access both accounts, please stick to using only one account. If however, you can't access the old account, I understand, just subscribe to the old thread that you posted in so people aren't posting the same answer to your question twice.

Can't get suexec to work with apache and php

I want to enable php scripts to be executed by a php process that runs as the same user as the owner of the site. In my case I am just using userdir so anything under /home/username/public_html should be run as username. I have mod_suexec.so loaded in my httpd.conf file. In the apache docs it says that:
User directories:
Requests that are processed by mod_userdir will call the suEXEC wrapper to execute CGI programs under the userid of the requested user directory. The only requirement needed for this feature to work is for CGI execution to be enabled for the user and that the script must meet the scrutiny of the security checks above. See also the --with-suexec-userdir compile time option.
I think my file meets the security checks it mentions which are listed on the site: http://httpd.apache.org/docs/2.0/suexec.html So that makes me wonder about CGI execution being enabled for my user and how do I modify that. Is there anything else I need to change to enable it?
Last edited by nLEyETn (2009-07-05 20:50:33)

I want to enable php scripts to be executed by a php process that runs as the same user as the owner of the site. In my case I am just using userdir so anything under /home/username/public_html should be run as username. I have mod_suexec.so loaded in my httpd.conf file. In the apache docs it says that:
User directories:
Requests that are processed by mod_userdir will call the suEXEC wrapper to execute CGI programs under the userid of the requested user directory. The only requirement needed for this feature to work is for CGI execution to be enabled for the user and that the script must meet the scrutiny of the security checks above. See also the --with-suexec-userdir compile time option.
I think my file meets the security checks it mentions which are listed on the site: http://httpd.apache.org/docs/2.0/suexec.html So that makes me wonder about CGI execution being enabled for my user and how do I modify that. Is there anything else I need to change to enable it?
Last edited by nLEyETn (2009-07-05 20:50:33)

OCI8 to existing Apache and PHP install

Hi
Wonder if anyone can help. I have an Apache server already installed with PHP on my linux system (Ubuntu) and I'd like to add the OCI8 driver so I can hook up my PHP pages to speak with the Oracle database. I've managed to do my applicaiton with postgres and mysql, just Oracle to do.
Can anyone provide me with the steps I need to make to get the OCI8 driver installed? I don't really want to install my server again, is thera way I can chnage the PHP.ini and httpd.conf files and install the OCI8 driver without rebuilding?
thanks

If you have the pear/pecl utilities, you might find a 'pecl install oci8' works. If you hit problems, try downloading oci8 1.3.4 from http://pecl.php.net/package/oci8/, extract it and cd to the directory, run "phpize", "./configure --with-oci8=instantclient,/path/to/instclient/libs" and "make". Move the oci8.so to your extension directory (see your php.ini) and enable oci8 with extension=oci8.so in your php.ini.
This is it in brief. Ping back if this + other standard install doc doesn't get you going.
-- cj

Updates for Apache and PHP coming

Hi all
I am new to os x and Mac in general. I would like to use my shinny new MacBook Pro as a mobile development platform for apache2, php, javascript, ajax. However, I am unable to find a binary of apache2 that is ready to install. Is there such an animal?
I would rather not use valuable disk space to load a compiler. All my other work is on Linux where I am comfortable compiling from tar files, but this is a new bird and my time is short.
Any information is appreciated.
Thanks,
Bob

I understand that Apache 2 will come with OS 10.5 this spring. Otherwise, I think you'll need to build it yourself. Or maybe you can find a binary at http://fink.sourceforge.net/

How do i get my apache and php server ?

Hello,
I want to be able to test my php page through my computer. How can i do that? I am very new to php and apached stuff. I have on my mac 10.4.3. How would you do it?
Thanks

Hello,
I want to be able to test my php page through my
computer. How can i do that? I am very new to php and
apached stuff. I have on my mac 10.4.3. How would you
do it?
Have you installed the PHP apache module if not you can download a prebuilt package that works with tiger.
http://www.entropy.ch/software/macosx/php/
Once installed put your PHP file inside your webserver directory and point your favourite webbrowser to it.
e.g.
http://127.0.0.1/~your_username/test.php

Multiple versions of Apache and PHP

I'm setting up a new Xserve with Apache2 and PHP5. I understand that Xserves ship with Apache2 and Apache 1.1 already installed and when I do
httpd -v
it reports back the older version of Apache. When I do
php -v
it reports back version 4.4.1.
At the time I investigated this, I didn't know Apple had pre-installed Apache2 so I installed it via Fink and FinkCommander. When I installed it originallyl from the entropy.ch files, asking httpd for its version reported the older version even though the System Preference pane said that Apache2 was up and running. What is going on that both are running simultaneously?
After installing Apache2 via Fink, httpd now properly reports its version as 2.0.55... which is what I would expect after properly updating Apache from 1 to 2.
I'm experiencing something similar with my PHP5 installation via Fink. Asking terminal for php -v reports version 4.4.1, however when I query PHP through a web script running phpinfo() it reports back in the web browser as being version 5.0.4.
So, what triggers the command line to report back different versions of installed web services than other methods? Why does my webpage through phpinfo() report back 5.0.4 where terminal says php -v is 4.4.1? Does it even matter? Does this mean two copies of PHP are running? What turned on the old version? I thought PHP had to be triggered by a PHP request. Why does Apache2, when insttalled through one method still report the older version when queried through terminal, but installed a idffererent way report the new version? Why did that not seem to afffect the ability for Apache2 to run properly? What does the version, as reported through terminal, of a given web service even mean if multiple versions of web services can run simultaneously and multiple reports of those versions can return different results? For that matter, how can I then truly verify that the version running is the version I installed? It wasn't until terminal reported my version of httpd as being 2.0.55 until I felt like the Apache2 installation was truly successful. Was I overthinnking the problem? Is there even a problem? Aaaagghghgh!!!!!!
17 Powerbook - 1.5Ghz Mac OS X (10.4.4) 2GB RAM, Adobe CS2, Xcode 2.2

Ahhh!!!! OK, that makes a ton of sense. I checked the PATH environment variable and see what you're talking about.
This kind of leads to a follow up question . If I do a
php -v
and I get back some information about some version of php installed at some path referenced in the environment variable, how can I tell what path OS X found the php command in? Is there any way to say, "Hey, computer, tell me where you think php is located." Because there are seven or eight paths I could search in, but it seems like a trivial matter for the computer to just tell me where it's looking, rather than me hunting for the command file.
It also seems that fink has installed /sw paths into my environment variable for me and that my apache httpd command is located in one of these but my new installation of php5 is not. That's really what was tripping me up was that I hadn't modified the environment variable for $PATH myself and some things were reporting properlly and others were not. Fink did most of the work I expected, but not all, leading to a confusing version report.
17 Powerbook - 1.5Ghz Mac OS X (10.4.4) 2GB RAM, Adobe CS2, Xcode 2.2
17 Powerbook - 1.5Ghz Mac OS X (10.4.4) 2GB RAM, Adobe CS2, Xcode 2.2

Mac OSX 10.6, Apache and PHP and Marc Liyanage

I am just about to get PHP up and running (hopefully) on my Mac where I have just installed 10.6, and I was about to use David Powers recommended route of Marc Liyanage's Entrophy PHP, but I read there that a number of people are having trouble with getting Marcs normally excellent installation up and running on 10.6.
Has anybody here used the Entrophy download on 10.6 and managed to get it working?
I also found this link from David Powers... http://foundationphp.com/tutorials/php_leopard.php
It seems straight forward, and I think I prefer to go this route if nobody has managed to get the entrophy download to work. However, does this step-by-step guide still apply to 10.6?
I know how to switch the apache server on by activating web sharing, but in 10.6, is the pre installed PHP still disabled by default?
I am asking this BEFORE I go ahead and try it for myself, as in the past I have managed to totally ruin a perfectly good Mac OSX system, and it caused me all sorts of headaches and pains.
Any advice is appreciated.
Thanks.
Mat

That was a great tutorial / walk through.
In fact, I would say that was far easier than the entrophy route (which is good) as you can see exactly what you are doing rather than relying on an installer which has often failed in the past for me, and then just suddenly worked for no apparent reason!
Just two things to improve it for other users, and they are really VERY minor... From previous experience, I knew where to find the php.ini.default file, but you don't let people know where to find that, and the links to the MySQL downloads were broken. I guess that is because the file names have changed or because I am coming at it from a different country. I got a message stating: 'That file does not exist on our download mirrors.'
Thanks for doing that, I really appreciate you (and the likes of David Powers) taking the time to set these tutorials up for others to use.
Mat

Apache and PHP Security Scans

Similar Messages

Maybe you are looking for