Re: Apache under attack and eating resources?

From: Devon H. O'Dell (dodell_at_sitetronics.com)
Date: 09/29/03

  • Next message: Philip Paeps: "Re: Apache under attack and eating resources?" 
    Date: Mon, 29 Sep 2003 08:35:20 +0200
To: Philip Paeps <philip+freebsd@paeps.cx>

    >I forgot to mention I was running mod_php4 from the ports. I don't think any
    >scripts changed in the last few weeks, but I'll have a look into it. Any idea
    >what kind of script bugs could cause PHP to tear things down like this, other
    >than the classic loop from hell?
    >
    >Thanks!
    >
    > - Philip
    >
    >
    PHP does a pretty good job from protecting against this. Installing
    mod_php4 from ports will also turn on the --enable-memory-limit switch,
    which causes PHP to terminate if more than x MB RAM are taken (this
    shouldn't segfault Apache). The "classic loop from hell" should also be
    undoable, since PHP has a 60 second execution time limit. You might want
    to run your httpd process in gdb to see what's going on when stuff
    segfaults. If this is indeed a problem with PHP, I'm sure the developers
    would like to hear about it ASAP!

    --Devon

    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: Philip Paeps: "Re: Apache under attack and eating resources?"

    Relevant Pages

    • Howards New Web Site. SLOW AS HELL
      ... I can see the new site is programmed in PHP, not sure what the old one was. ... The old site was nice and fast, while this new one is slow as hell. ... have moved to a new server. ... Web site is useless right now. ...
      (alt.fan.howard-stern)
    • Re: Howards New Web Site. SLOW AS HELL
      ... slow as hell. ... I'm a PHP programmer, so it's not the PHP that's slowing it down. ... logical reason is that the old server didn't supposed PHP, ...
      (alt.fan.howard-stern)
    • Re: Howards New Web Site. SLOW AS HELL
      ... slow as hell. ... I'm a PHP programmer, so it's not the PHP that's slowing it down. ... logical reason is that the old server didn't supposed PHP, ...
      (alt.fan.howard-stern)
    • Re: how to check whether the page is the last page?
      ... Rob wrote: ... Besides, even if Jerry and I were the two worst people on earth, what the hell would that have to do with PHP? ...
      (comp.lang.php)
    • Re: [PHP] manual key generation
      ... Subject: [PHP] manual key generation ... > What the hell is that supposed to mean? ...
      (php.general)