PHP - Revision history

Vincent: fix colouring

2017-10-05T20:07:02Z

fix colouring

← Older revision		Revision as of 20:07, 5 October 2017
Line 35:		Line 35:
	The number of processes to use will heavily depend on the traffic on your websites and on the available RAM/CPU on your server. To find optimal values check the log file <code>/var/log/php7.0-fpm.log</code>. It will contains warnings when the number of processes need adjustment.		The number of processes to use will heavily depend on the traffic on your websites and on the available RAM/CPU on your server. To find optimal values check the log file <code>/var/log/php7.0-fpm.log</code>. It will contains warnings when the number of processes need adjustment.

	The values to change are present in <code>/etc/php/7.0/fpm/pool.d/www.conf</code>. A good start point can be<syntaxhighlight lang="~~php~~">		The values to change are present in <code>/etc/php/7.0/fpm/pool.d/www.conf</code>. A good start point can be<syntaxhighlight lang="ini">
	pm = dynamic		pm = dynamic
	pm.max_children = 30		pm.max_children = 30

Vincent: php-fpm config

2017-06-24T10:35:55Z

php-fpm config

← Older revision		Revision as of 10:35, 24 June 2017
Line 20:		Line 20:
	</syntaxhighlight>Unless specified, all the settings bellow should go to <code>/etc/php/7.0/mods-available/local-common.ini</code>		</syntaxhighlight>Unless specified, all the settings bellow should go to <code>/etc/php/7.0/mods-available/local-common.ini</code>

	=== ~~Integrate with Nginx~~ ===		=== PHP-FPM ===

	==== ~~Debian Jessie~~ ====		==== Integrate with Nginx ====
	Create file <code>/etc/nginx/conf.d/php.conf</code>		Create file <code>/etc/nginx/conf.d/php.conf</code>
	<syntaxhighlight lang="nginx">		<syntaxhighlight lang="nginx">
Line 28:		Line 28:
	server unix:/run/php/php7.0-fpm.sock;		server unix:/run/php/php7.0-fpm.sock;
	}		}
			</syntaxhighlight>

			==== Configure Processes ====
			PHP-FPM create processes to handle incoming requests. If it runs out of available processes, new requests will be put in queue and the users will experience delays.

			The number of processes to use will heavily depend on the traffic on your websites and on the available RAM/CPU on your server. To find optimal values check the log file <code>/var/log/php7.0-fpm.log</code>. It will contains warnings when the number of processes need adjustment.

			The values to change are present in <code>/etc/php/7.0/fpm/pool.d/www.conf</code>. A good start point can be<syntaxhighlight lang="php">
			pm = dynamic
			pm.max_children = 30
			pm.start_servers = 10
			pm.min_spare_servers = 5
			pm.max_spare_servers = 20
			pm.max_requests = 500


	</syntaxhighlight>		</syntaxhighlight>

Vincent: Update to Strech

2017-06-24T08:43:11Z

Update to Strech

← Older revision		Revision as of 08:43, 24 June 2017
Line 1:		Line 1:
	~~{{Debian}}~~
	== Prerequisite ==		== Prerequisite ==

Line 5:		Line 4:

	== Installation ==		== Installation ==

	~~=== Debian Jessie ===~~
	~~<syntaxhighlight lang="console">~~
	~~# apt install php5-cli php5-fpm php5-apcu~~
	~~</syntaxhighlight>~~

	~~=== Debian Stretch ===~~
	<syntaxhighlight lang="console">		<syntaxhighlight lang="console">
	# apt install ~~php7.0~~-cli ~~php7.0~~-fpm ~~php7.0~~-apcu		$ sudo apt install php-cli php-fpm php-apcu
	</syntaxhighlight>		</syntaxhighlight>

	== Configuration ==		== Configuration ==
			{{Warning\|msg=Each version of php has different configuration files. You might need to adapt the 7.0 below to your actual php version. You will also need to redo this after php updates.}}

	=== Common configuration ===		=== Common configuration ===
Line 22:		Line 15:
	In Debian, the different flavor of PHP have their own configuration file. This allow fine grained configuration but makes it harder to have common behavior.		In Debian, the different flavor of PHP have their own configuration file. This allow fine grained configuration but makes it harder to have common behavior.

	Let’s create a common file read by all PHP interpreters.		Let’s create a common file read by all PHP interpreters.<syntaxhighlight lang="console">
			$ echo -e '; Commmon configuration for all PHP interpreters\n; priority=99\n' \| sudo tee /etc/php/7.0/mods-available/local-common.ini > /dev/null
	~~==== Debian Jessie ====~~		$ sudo phpenmod -v 7.0 local-common
	<syntaxhighlight lang="console">
	# echo -e '; Commmon configuration for all PHP interpreters\n; priority=99\n' > /etc/~~php5~~/~~mods-available/local-common~~.~~ini~~
	~~# php5enmod local-common~~
	~~</syntaxhighlight>~~

	~~Unless specified, all the settings bellow should go to <code>/etc/php5~~/mods-available/local-common.ini~~</code~~>

	~~==== Debian Stretch ====~~
	~~<syntaxhighlight lang="console">~~
	~~# echo -e '; Commmon configuration for all PHP interpreters\n; priority=99\n' > /etc/php/7.0~~/~~mods-available~~/~~local-common.ini~~
	# phpenmod -v 7.0 local-common
	</syntaxhighlight>Unless specified, all the settings bellow should go to <code>/etc/php/7.0/mods-available/local-common.ini</code>		</syntaxhighlight>Unless specified, all the settings bellow should go to <code>/etc/php/7.0/mods-available/local-common.ini</code>

Line 41:		Line 23:

	==== Debian Jessie ====		==== Debian Jessie ====
	Create file <code>/etc/nginx/conf.d/~~php5~~.conf</code>		Create file <code>/etc/nginx/conf.d/php.conf</code>
	<syntaxhighlight lang="nginx">		<syntaxhighlight lang="nginx">
	upstream ~~php5~~ {		upstream php {
	server unix:~~/var~~/run/~~php5-fpm.sock;~~		server unix:/run/php/php7.0-fpm.sock;
	}
	~~</syntaxhighlight>~~

	~~==== Debian Stretch ====~~
	~~Create file <code>/etc/nginx/conf.d/php7.0.conf</code><syntaxhighlight lang="nginx">~~
	~~upstream php7 {~~
	~~server unix:/var/run~~/php7.0-fpm.sock;
	}		}
	</syntaxhighlight>		</syntaxhighlight>
Line 104:		Line 79:
	open_basedir = "/usr/share/php/"		open_basedir = "/usr/share/php/"
	</syntaxhighlight>		</syntaxhighlight>
			[[Category:Linux Server]]
	~~==== Limit access to POST data ====~~
	~~This setting only apply to Debian 8 (Jessie) and bellow<syntaxhighlight lang="ini">~~
	~~; The preferred method for accessing raw POST data is php://input, and $HTTP_RAW_POST_DATA is deprecated in PHP 5.6.0 onwards.~~
	~~; This feature is removed in PHP7~~
	~~always_populate_raw_post_data = -1;~~
	~~</syntaxhighlight>~~[[Category:Linux Server]]
	[[Category:Web Server]]		[[Category:Web Server]]

Vincent: Remove WIP tag

2016-08-21T10:05:58Z

Remove WIP tag

← Older revision		Revision as of 10:05, 21 August 2016
Line 1:		Line 1:
	{{Debian}}~~{{WIP}}~~		{{Debian}}

	== Prerequisite ==		== Prerequisite ==

Line 21:		Line 20:
	=== Common configuration ===		=== Common configuration ===

	In Debian, the different ~~flavour~~ of PHP have their own configuration file. This allow fine grained configuration but makes it harder to have common ~~behaviour~~.		In Debian, the different flavor of PHP have their own configuration file. This allow fine grained configuration but makes it harder to have common behavior.

	Let’s create a common file read by all PHP interpreters.		Let’s create a common file read by all PHP interpreters.
Line 98:		Line 97:

	By default, PHP allow scripts to read any file on the machine including sensible files like <code>/etc/passwd</code>.		By default, PHP allow scripts to read any file on the machine including sensible files like <code>/etc/passwd</code>.

	The setting bellow limit that. Of course when new sites are added, the list of folder need to be extended.		The setting bellow limit that. Of course when new sites are added, the list of folder need to be extended.
	<syntaxhighlight lang="ini">		<syntaxhighlight lang="ini">

Vincent: PHP 7 Nginx config

2016-08-06T19:02:00Z

PHP 7 Nginx config

← Older revision		Revision as of 19:02, 6 August 2016
Line 41:		Line 41:
	=== Integrate with Nginx ===		=== Integrate with Nginx ===

			==== Debian Jessie ====
	Create file <code>/etc/nginx/conf.d/php5.conf</code>		Create file <code>/etc/nginx/conf.d/php5.conf</code>
	<syntaxhighlight lang="nginx">		<syntaxhighlight lang="nginx">
	upstream php5 {		upstream php5 {
	server unix:/var/run/php5-fpm.sock;		server unix:/var/run/php5-fpm.sock;
			}
			</syntaxhighlight>

			==== Debian Stretch ====
			Create file <code>/etc/nginx/conf.d/php7.0.conf</code><syntaxhighlight lang="nginx">
			upstream php7 {
			server unix:/var/run/php7.0-fpm.sock;
	}		}
	</syntaxhighlight>		</syntaxhighlight>

Vincent: php7

2016-05-09T06:52:52Z

php7

← Older revision		Revision as of 06:52, 9 May 2016
Line 7:		Line 7:
	== Installation ==		== Installation ==

			=== Debian Jessie ===
	<syntaxhighlight lang="console">		<syntaxhighlight lang="console">
	# apt install php5-cli php5-fpm php5-apcu		# apt install php5-cli php5-fpm php5-apcu
			</syntaxhighlight>

			=== Debian Stretch ===
			<syntaxhighlight lang="console">
			# apt install php7.0-cli php7.0-fpm php7.0-apcu
	</syntaxhighlight>		</syntaxhighlight>

Line 18:		Line 24:

	Let’s create a common file read by all PHP interpreters.		Let’s create a common file read by all PHP interpreters.

			==== Debian Jessie ====
	<syntaxhighlight lang="console">		<syntaxhighlight lang="console">
	# echo -e '; Commmon configuration for all PHP interpreters\n; priority=99\n' > /etc/php5/mods-available/local-common.ini		# echo -e '; Commmon configuration for all PHP interpreters\n; priority=99\n' > /etc/php5/mods-available/local-common.ini
Line 24:		Line 32:

	Unless specified, all the settings bellow should go to <code>/etc/php5/mods-available/local-common.ini</code>		Unless specified, all the settings bellow should go to <code>/etc/php5/mods-available/local-common.ini</code>

			==== Debian Stretch ====
			<syntaxhighlight lang="console">
			# echo -e '; Commmon configuration for all PHP interpreters\n; priority=99\n' > /etc/php/7.0/mods-available/local-common.ini
			# phpenmod -v 7.0 local-common
			</syntaxhighlight>Unless specified, all the settings bellow should go to <code>/etc/php/7.0/mods-available/local-common.ini</code>

	=== Integrate with Nginx ===		=== Integrate with Nginx ===
Line 29:		Line 43:
	Create file <code>/etc/nginx/conf.d/php5.conf</code>		Create file <code>/etc/nginx/conf.d/php5.conf</code>
	<syntaxhighlight lang="nginx">		<syntaxhighlight lang="nginx">
	upstream ~~php~~ {		upstream php5 {
	server unix:/var/run/php5-fpm.sock;		server unix:/var/run/php5-fpm.sock;
	}		}
Line 42:		Line 56:
	It is generally a bad idea to give information on the technologies used by your system. This setting make sure that PHP is not exposed.		It is generally a bad idea to give information on the technologies used by your system. This setting make sure that PHP is not exposed.
	<syntaxhighlight lang="ini">		<syntaxhighlight lang="ini">
	; Name of the sessionid cookie		; Name of the sessionid cookie. Hide PHP and get a smaller cookie
	session.name = sid		session.name = sid
	; Don't add script name in emails		; Don't add script name in emails
Line 84:		Line 98:

	==== Limit access to POST data ====		==== Limit access to POST data ====
	<syntaxhighlight lang="ini">		This setting only apply to Debian 8 (Jessie) and bellow<syntaxhighlight lang="ini">
	; The preferred method for accessing raw POST data is php://input, and $HTTP_RAW_POST_DATA is deprecated in PHP 5.6.0 onwards.		; The preferred method for accessing raw POST data is php://input, and $HTTP_RAW_POST_DATA is deprecated in PHP 5.6.0 onwards.
	; This feature is removed in PHP7		; This feature is removed in PHP7

Vincent: always_populate_raw_post_data = -1;

2016-05-06T07:28:03Z

always_populate_raw_post_data = -1;

← Older revision		Revision as of 07:28, 6 May 2016
Line 83:		Line 83:
	</syntaxhighlight>		</syntaxhighlight>

	[[Category:Linux Server]]		==== Limit access to POST data ====
			<syntaxhighlight lang="ini">
			; The preferred method for accessing raw POST data is php://input, and $HTTP_RAW_POST_DATA is deprecated in PHP 5.6.0 onwards.
			; This feature is removed in PHP7
			always_populate_raw_post_data = -1;
			</syntaxhighlight>[[Category:Linux Server]]
	[[Category:Web Server]]		[[Category:Web Server]]

Vincent: Limit File Access

2016-03-19T23:20:52Z

Limit File Access

← Older revision		Revision as of 23:20, 19 March 2016
Line 71:		Line 71:
	; Warning: it might break you application if you don't use HTTPS		; Warning: it might break you application if you don't use HTTPS
	session.cookie_secure = 1		session.cookie_secure = 1
			</syntaxhighlight>

			==== Limit File Access ====

			By default, PHP allow scripts to read any file on the machine including sensible files like <code>/etc/passwd</code>.
			The setting bellow limit that. Of course when new sites are added, the list of folder need to be extended.
			<syntaxhighlight lang="ini">
			; Column separated list of folder to allow inclusion from.
			; Eg. "/usr/share/php/:/usr/share/phpmyadmin/"
			open_basedir = "/usr/share/php/"
	</syntaxhighlight>		</syntaxhighlight>

	[[Category:Linux Server]]		[[Category:Linux Server]]
	[[Category:Web Server]]		[[Category:Web Server]]

Vincent: /* Hide PHP */

2016-03-19T18:33:37Z

Hide PHP

← Older revision		Revision as of 18:33, 19 March 2016
Line 40:		Line 40:
	==== Hide PHP ====		==== Hide PHP ====

	It is generally a bad idea to give information on the technologies used by your system. This setting make sure that PHP is not exposed~~. It also is shorter than the default which gain a few bytes per request~~.		It is generally a bad idea to give information on the technologies used by your system. This setting make sure that PHP is not exposed.
	<syntaxhighlight lang="ini">		<syntaxhighlight lang="ini">
	; Name of the sessionid cookie		; Name of the sessionid cookie
	session.name = sid		session.name = sid
			; Don't add script name in emails
			mail.add_x_header = 0
	</syntaxhighlight>		</syntaxhighlight>

Vincent: Secure sessions

2016-03-19T15:29:01Z

Secure sessions

@@ Line 12: / Line 12: @@
 == Configuration ==
 === Integrate with Nginx ===
@@ Line 22: / Line 34: @@
 </syntaxhighlight>
 [[Category:Linux Server]]
 [[Category:Web Server]]