SuPHP

The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

This article or section needs language, wiki syntax or style improvements. See Help:Style for reference.

Reason: Many style violations. (Discuss in Talk:SuPHP)

suPHP is a tool for executing PHP scripts with the permissions of their owners. It consists of an Apache module (mod_suphp) and a setuid root binary (suphp) that is called by the Apache module to change the uid of the process executing the PHP interpreter.

Tip: With suPHP you are able, for example, to manage php applications in user's home directories without worry about permissions problems (when creating directories, files or uploads)

Installation

Install suPHP from the Arch User Repository: suphp^AUR

Configuration

To activate mod_suphp for the appropriate Virtual Hosts add a line like in your /etc/http/conf/http.conf file:

/etc/http/conf/http.conf

#suPHP
LoadModule suphp_module modules/mod_suphp.so

To use suPHP to parse PHP-Files you must add also this:

/etc/http/conf/http.conf

 AddType application/x-httpd-php .php

Then, for actually turn on mod_suphp add this line:

/etc/http/conf/http.conf

 suPHP_Engine on

Finally, you have to specify at least one suPHP_AddHandler directive, because mod_suphp by default handles no mime-type.

/etc/http/conf/http.conf

suPHP_AddHandler application/x-httpd-php

Finally your suPHP installation is complete. Before start using it you need to restart your HTTPd server by following command:

# systemctl restart httpd

Note: If these changes are made in global Apache-configuration file, this will activate mod_suphp for all Virtual Hosts..

Additional information

Please note, that running mod_suphp and mod_php concurrently should be avoided. The same applies to CGI scripts which are run with webserver privileges.

suPHP should only be used if you are using no CGI scripts or if all CGI scripts are run using suExec.

Warning: If you use suPHP module instead of mod_php (php-apache) one, you will not be able to use phpMyadmin and some other applications because incompatibilities with php-cgi interpeter.

suPHP and mod_php

In order to use suPHP along side mod_php (for use phpMyAdmin for instance). The only way to go is configure suPHP and mod_php in differents Virtual Hosts or Directories.

suPHP in user directories

The following instructions intent to show how to configure suPHP just to work in users public_html directories and mod_php for everything else.

First of all, you need to change the suPHP handler name to avoid confilcts with php_module. Change this line in /etc/suphp/suphp.conf

/etc/suphp/suphp.conf

[handlers]
;Handler for php-scripts
application/x-httpd-suphp="php:/usr/bin/php-cgi"

Add or modify this line in your /etc/http/conf/http.conf file:

/etc/http/conf/http.conf

#suPHP
LoadModule suphp_module modules/mod_suphp.so

Then, in order to set the suPHP module for user directories, add this to your /etc/http/conf/extra/http-userdir.conf file:

/etc/httpd/conf/extra/httpd-userdir.conf

<Directory "/home/*/public_html">
...
    DirectoryIndex index.php index.html
    suPHP_Engine on
    AddHandler application/x-httpd-suphp .php
    suPHP_AddHandler application/x-httpd-suphp
...
</Directory>

Finally you need to restart your HTTPd server by following command:

# systemctl restart httpd