http://www.sandzak.com/blog Blog about PHP5 hosting programming techniques Sun, 04 Feb 2007 20:22:58 +0000 http://backend.userland.com/rss092 en 560Part IIIAdvanced Features and TechniquesMost users today who use PHP s CGI mode are interested in using it as a standalone binary, similar to Perl, rather than for Web development. If this is the case, safe mode is probablybeside the point. --enable-safe-modeSafe mode was originally designed for and is still ... http://www.sandzak.com/blog/2007/02/04/offshore-web-hosting-560part-iiiadvanced-features-and-techniquesmost-users-today-who/ 559Chapter 30ConfigurationTo learn more about XML-based Web services and PHP, see Chapter 41. --with-dom[=DIR] This flag builds with DOM XML support, using the GNOME xml library (a.k.a. libxml, gnome-xml). The DIRpath should point to your libxmlinstallation; if you don t set thisvalue, it defaults to /usr. You can download ... http://www.sandzak.com/blog/2007/01/25/secure-web-hosting-559chapter-30configurationto-learn-more-about-xml-based-web-services/ 558Part IIIAdvanced Features and TechniquesTable 30-1(continued) Database NameDefault DirectoryFlag SyntaxPostgreSQL/usr/local/pgsql--with-pgsql[=DIR] SAP DB/usr/local--with-sapdb[=DIR] Solid*/usr/local/solid--with-solid[=DIR] Sybase/home/sybase--with-sybase[=DIR] Sybase-CT/home/sybase--with-sybase-ct[=DIR] SQLiteBundled--with-sqliteThe databases marked with an asterisk use ODBC-based interfaces. These ODBC choices aremutually exclusive you must limit yourself to a maximum of one. Each database mandates slightly different configuration options in php.inior other configu- ration ... http://www.sandzak.com/blog/2007/01/22/558part-iiiadvanced-features-and-techniquestable-30-1continued-database-namedefault-wiki-hosting/ 557Chapter 30Configurationthe default choice. If you forget this (or the --with-apxs) flag when trying to make a staticApache module, you will end up with the CGI version. You almost certainly want to set the Apache base directory parameter because makemaydefault to some unexpected location. Remember that Apache installs in different ... http://www.sandzak.com/blog/2007/01/20/atlanta-web-hosting-557chapter-30configurationthe-default-choice-if-you-forget-this/ 556Part IIIAdvanced Features and TechniquesIn fact, the truth is that the PHP build for Windows (the so-called manual installation, not theinstaller version) now offers almost all the functionality of Unix builds with much less effort. Windows users only need to worry about the variables that can be set with the ... http://www.sandzak.com/blog/2007/01/17/556part-iiiadvanced-features-and-linux-web-host-techniquesin-fact-the-truth/ Configuration In this chapter, we discuss the many configuration options availablewith PHP, particularly the Unix Apache module version, in somedetail. The goal is for you to better understand the tradeoffs of eachcapability you may enable or disable and how they may affect eachother. We also touch on ways you ... http://www.sandzak.com/blog/2007/01/14/configuration-in-this-chapter-we-discuss-the-godaddy-web-hosting-many/ 553Chapter 29Security .Minimize the damage.Where possible, make sure that the damage possible from a par- ticular type of security breach is minimal. Encrypt sensitive data. If you run your ownWeb server, make sure it is running as a dummy user. .Finally, if you run your own server, spend some time ... http://www.sandzak.com/blog/2007/01/12/553chapter-29security-minimize-the-damagewhere-possible-make-sure-video-web-hosting/ 552Part IIIAdvanced Features and TechniquesFYI: Security Web SitesIf you are losing sleep after reading this chapter, fear not. Every administrator and site designeraround the world is grappling with the same issues, and there is a strong feeling of solidarityamong computer security professionals. Many Web sites are devoted to computer security, ... http://www.sandzak.com/blog/2007/01/09/552part-iiiadvanced-features-and-techniquesfyi-security-web-sitesif-vtiger-hosting/ 551Chapter 29Security$key = get_user_key($username); $encr_hash = mcrypt_cbc(MCRYPT_BLOWFISH, $key, $hash, MCRYPT_ENCRYPT); $sfp = fopen($sig); $sig_data = fread($sig, $sig_size); fclose($sfp); if ($encr_hash != $sig_data) echo Rejected -- signature did not match ; else { echo Accepted ; // Continue handling the uploaded file} } ?> This program parallels ... http://www.sandzak.com/blog/2007/01/07/551chapter-29securitykey-get_user_keyusername-encr_hash-mcrypt_cbcmcrypt_blowfish-key-private-tomcat-hosting/ 550Part IIIAdvanced Features and TechniquesWhat you need is a digital fingerprint for a large file. What if we treat the binary data of thefile as a list of integers, add them all together, then chop off all but 128 bits of the sum? Wecall the final 128-bit number the checksum.The ... http://www.sandzak.com/blog/2007/01/04/550part-iiiadvanced-features-and-techniqueswhat-you-need-is-secure-web-hosting/