phpBB final version 3 has been released and available for download. phpBB is a popular Internet forum package written in the PHP programming language.
This blog post provides good information about password hashing. The main point of this article is to use strong encryption and make attackers life hard. So if someone gains access to database, attacker could figure out your password using a brute force or rainbow tables.
Recently I wrote about installing and running Xcache under Red hat enterprise Linux and CentOS Linux. By default Xcache use /dev/zero for caching. All you have to do is create /dev/zero in chrooted jail. Type the following command (assuming that your jail is located at /lighttpd.jail directory):
# mkdir -p /lighttpd.jail/dev
# mknod -m 666 /lighttpd.jail/dev/zero c 1 5
Just restart your web server and xcache should work under chrooted lighttpd web server.
Many people asked me to write about setting up Lighttpd under CentOS or RHEL 5 Linux using chroot() call. The instructions are almost same but you need to make little modification as compare to Debian / Ubuntu Linux instructions.
Recently I’ve noticed that Redhat removed support for following php pear packages:
a) NET/SMTP : An implementation of the SMTP protocol
b) Mail : Class that provides multiple interfaces for sending emails
c) Net/Socke : Network Socket Interface
The simplest solution is downloading and installs these files from php pear repo.
Step # 1: Download files
Use wget command to download all files:
# cd /tmp
# wget http://download.pear.php.net/package/Mail-1.1.14.tgz
# wget http://download.pear.php.net/package/Net_SMTP-1.2.10.tgz
Untar all files:
# tar -zxvf Mail-1.1.14.tgz
# tar -zxvf Net_SMTP-1.2.10.tgz
# tar -zxvf Net_Socket-1.0.8.tgz
Step # 2: Install files
Simply copy file to your webroot such as /www/usr/share/pear or standard location such as /usr/share/pear:
# cd /usr/share/pear
# mkdir Net
# cd Net
# cp /tmp/Net_SMTP-1.2.10/SMTP.php .
# cp /tmp/Net_Socket-1.0.8/Socket.php .
# cd ..
# cp -avr /tmp/Mail-1.1.14/Mail/ .
# cp -avr /tmp/Mail-1.1.14/Mail.php .
Step # 3: Test SMTP email
Now you have required files, all you have to do is send email using authenticated smtp server.
FastCGI is a language independent, scalable, open extension to CGI that provides high performance without the limitations of server specific APIs. I’m very big fan of FastCGI. Almost all my Apache / Lighttpd servers are powered by php FastCGI.
Today Microsoft announced the official release of their FastCGI extension for IIS server version 5.1 and 6.0. New FastCGI module should improves the performance and reliability of PHP on Windows operating system.
Since early 2006, Microsoft and Zend have been working together on a technical collaboration with the PHP community to significantly enhance the reliability and performance of PHP on Windows Server 2003 and Windows Server 2008. As part of this collaboration, the IIS product group has been working on a new component for IIS6 and IIS7 called FastCGI Extension which will enable IIS to much more effectively host PHP applications.
=> Using FastCGI to Host PHP Applications on IIS 6.0 and IIS 5.1
PHP offers simple but effective solution to log all errors to a log fiie.
On all production web server you must turn off displaying error to end users via a web browser. Remember PHP gives out lots of information about path, database schema and all other sort of sensitive information. You are strongly advised to use error logging in place of error displaying on production web sites. The idea is quite simple only developer should able to see php error log.
Continue reading “PHP Log All Errors to a Log File to Get Detailed Information”