Knowledgebase

Disallowing php.ini override in suPHP

Its very simple to enable this function in server using suPHP. Just by enabling phprc_paths in /opt/suphp/etc/suphp.conf will do the work for you. See the steps below:

 

vi /opt/suphp/etc/suphp.conf


Find the code below and press I to insert text.

[phprc_paths]
;Uncommenting these will force all requests to that handler to use the php.ini
;in the specified directory regardless of suPHP_ConfigPath settings.
;application/x-httpd-php=/usr/local/lib/
;application/x-httpd-php4=/usr/local/php4/lib/
;application/x-httpd-php5=/usr/local/lib/


Remove (;) from the last three lines ie.

application/x-httpd-php=/usr/local/lib/
application/x-httpd-php4=/usr/local/php4/lib/
application/x-httpd-php5=/usr/local/lib/


Now press ESCAPE button and enter :wq to save the file.

Restart Apache

/sbin/service httpd restart


Now Users wont be able to override your default php.ini file.

 

  • 118 Users Found This Useful
Was this answer helpful?

Related Articles

Installing Nginx In WHM/Cpanel

NginX is the fastest web server in the world. Nginx is known for its high performance and low resource. Many enterprises, such as WordPress and Comodo, already switched to NginX as it proves to...

Installing ConfigServer Security & Firewall (CSF)

Well Installing ConfigServer Security & Firewall is very easy. Just Follow the Setps Below Installation Part:- Command:- rm -fv csf.tgz wget http://www.configserver.com/free/csf.tgz tar -xzf...

Installing Mod_Antiloris To Mitigate SlowLoris DOS Attack

1) Download the installer from sourceforge and install cd /usr/local/src wget http://sourceforge.net/projects/mod-antiloris/files/mod_antiloris-0.4.tar.bz2 tar -xvjf mod_antiloris-0.4.tar.bz2...

Installing (D)DoS Deflate To Mitigate DDoS Attack

(D)DoS Deflate is a lightweight bash shell script designed to assist in the process of blocking a denial of service attack. It utilizes the command below to create a list of IP addresses connected...

Installing BDF For Bruteforce Prevention

BFD is a modular shell script for parsing application logs and checking for authentication failures. It does this using a rules system where application specific options are stored including...