Date: 06/11/07 (Apache)    Keywords: security, hosting, apache

Can Apache run under different instances, so that we can direct traffic to each Virtual Host under a different instance. Would doing so offer better security than simply using virtual hosting? One of our sites is internal, the others are public. We want to keep the internal site locked down extremely tight.

In that same light, is it possible to have different SSL certs for different Virtual Hosts running on the same physical box (under one IP)?

Thanks for suggestions/pointers.

Source: http://community.livejournal.com/apache/37060.html

Date: 06/13/07 (PHP Community)    Keywords: php, apache

Not sure if this goes here or in apache..

Is there a $_SERVER variable for protocol?

edited
Sorry, RTFM and found that protocol is available via $_SERVER['SERVER_PROTOCOL'] in php 4.1 and above.. BUT that returns HTTP/1.1 regarless of HTTP or HTTPS.

So to check for HTTPS KernelM suggests using $_SERVER['HTTPS'], and look for an empty value for HTTP or 'on' for HTTPS. (works perfectly) Thanks! :o)

Source: http://community.livejournal.com/php/572033.html

Date: 06/21/07 (Apache)    Keywords: apache

I guess lots of people (including me) are having problems getting Apache to work on Vista. I don't know if anyone's already posted this solution, but I pieced it together from a few different sites that each offered their own little tidbit. I hope this helps someone:

1) if you have already been trying to make this work, make sure you completely remove and detele all evidence of apache 2.2.4 from your computer: program files, registry, etc. if you haven't had a failed install attempt and you're starting fresh, go on to step 2.
2) turn off User Access Control
2) run cmd.exe as an administrator. you can do this by right-clicking on the link in the start menu program list.
3) from the command line, go to the directory your apache msi file is in. enter: "msiexec /i .msi" (without the quotes obviously)
5) let the program run, check off everything as you see fit. when the program has finished running, it will most likely display an error popup. close this.
6) back on the command line (still running as administrator), go to \bin and enter: "httpd -k install"
7) now apache should show up as a service. but you're not done yet! go to the apache monitor/control thingy in your start menu. right-click it and go to properties->compatibility. set the compatibility mode to winxp sp2.
8) that's it! you may want to start your apache control, but it will run now without that.

Source: http://community.livejournal.com/apache/37811.html

Date: 06/28/07 (Apache)    Keywords: browser, apache

We bought a certificate for a domain.   I've set up a few sites with ssl before this, so I was careful to enter the FQDN in my csr request.  A day later Verisign sent the cert in an email, which we copied into a sitename.crt file on the server.   I made an unecrypted version of the key so I wouldn't have to enter the passphrase every time Apache starts.  (yes I entered the passphrase, which was accepted)

So - I start the server without errors.  When I access the site using https://sitename, the browser returns a certificate mismatch error.   The cert details appear with localhost, localdomain, ect, which is not what I entered when creating the csr & key. 


    ServerName sitename.department.domain.ext
    ServerAdmin abc@123.def
    DocumentRoot /www/virtualhosts/sitename
    ErrorLog /var/log/httpd/sitename-error_log
    CustomLog /var/log/httpd/sitename-access_log common
    SSLEngine On
    SSLCertificateFile /usr/local/ssl/crt/sitename.crt
    SSLCertificateKeyFile /usr/local/ssl/crt/sitename_unencrypted.key
    SSLCACertificateFile /usr/local/ssl/crt/intermediate.crt



Is there a way to print out the details listed in a crt file, from command line?   Can I do the same with the original csr file?  

Source: http://community.livejournal.com/apache/38398.html

Date: 07/02/07 (Open Source)    Keywords: linux, google, apache

In addition to Linux, GPLv3 also faces threats from Google, which prefers Apache licenses that protect its commercial rights. So, are you making the switch?

Source: http://feeds.feedburner.com/~r/zdnet/open-source/~3/129755399/

Date: 08/01/07 (Web Development)    Keywords: php, mysql, browser, sql, apache

ok, this is getting posted a few places because I'm head/desk-ing all over the place on it.

Have Intranet, Intranet is based around an OS X Mac running Apache/PHP/MySQL. Was working fine, OS X server (just regular OS X but the machine is designed to work as a server) was at someone's house. Worked fine with the IP it had there and everything pointing to it, which was actually the IP of the router it was connected to I believe. This was the ServerName address in httpd.conf . Server moved to small office, BOOM.

Updated the ServerName value in httpd.conf to the proper IP for the machine, however if you try and go to that IP (how the intranet works there, via the browsers connecting to that ip then going where they need to from the index page there) it gives a "Forbidden" error (don't think it's even a 403) and says that you don't have permission to connect to the OLD IP address. I don't understand this, we even disconnected it from the internet to see if it was even actually trying to connect to that IP and no, same error. Anything else and it says it cannot be reached when the uplink is disconnected, so definitely a problem on the server somehow. On top of that, localhost and 127.0.0.1 will work, the machine will reach out to the internet and can be mounted in internet explorer with the \\servername\path\etc., however this won't let us access the PHP processor to display the pages, just the files themselves.

Is there anywhere else that a problem like this could lurk? Just uninstall Apache and re-install? I've never removed Apache from a machine or done a make of apache or anything else on a mac so I'm not exactly sure how to if that would even help. Really don't understand what's going on and I need to get this up ASAP. :( Any help please? Will repay in kind somehow, not monetarily but somehow (work, knowledge, something).

Thanks!

Cross posted all over sort of.

Source: http://community.livejournal.com/webdev/425477.html

Date: 08/01/07 (PHP Community)    Keywords: php, mysql, browser, sql, apache

ok, this is getting posted a few places because I'm head/desk-ing all over the place on it.

Have Intranet, Intranet is based around an OS X Mac running Apache/PHP/MySQL. Was working fine, OS X server (just regular OS X but the machine is designed to work as a server) was at someone's house. Worked fine with the IP it had there and everything pointing to it, which was actually the IP of the router it was connected to I believe. This was the ServerName address in httpd.conf . Server moved to small office, BOOM.

Updated the ServerName value in httpd.conf to the proper IP for the machine, however if you try and go to that IP (how the intranet works there, via the browsers connecting to that ip then going where they need to from the index page there) it gives a "Forbidden" error (don't think it's even a 403) and says that you don't have permission to connect to the OLD IP address. I don't understand this, we even disconnected it from the internet to see if it was even actually trying to connect to that IP and no, same error. Anything else and it says it cannot be reached when the uplink is disconnected, so definitely a problem on the server somehow. On top of that, localhost and 127.0.0.1 will work, the machine will reach out to the internet and can be mounted in internet explorer with the \\servername\path\etc., however this won't let us access the PHP processor to display the pages, just the files themselves.

Is there anywhere else that a problem like this could lurk? Just uninstall Apache and re-install? I've never removed Apache from a machine or done a make of apache or anything else on a mac so I'm not exactly sure how to if that would even help. Really don't understand what's going on and I need to get this up ASAP. :( Any help please? Will repay in kind somehow, not monetarily but somehow (work, knowledge, something).

Thanks!

Cross posted all over sort of.

Source: http://community.livejournal.com/php/578944.html

Date: 08/07/07 (Open Source)    Keywords: java, google, apache

Apache's share is declining because Google has switched its own servers to its own flavor of Apache -- the Google Front End server -- which makes extensive use of AJAX and server-side Java for faster page loads.

Source: http://feeds.feedburner.com/~r/zdnet/open-source/~3/141592703/

Date: 08/27/07 (Apache)    Keywords: php, apache

I want to generate links with my code like "index_flotsam.php" and "index_jetsam.php" and have apache ignore everything but "index.php". So if the user clicks on "index_flotsam.php" it will just take them to the file "index.php" but will still display the url "index_flotsam.php". I'm using Apache 2.2.4. I have a feeling I could probably do this with the FilesMatch directive, but I'm not entirely sure how. Any ideas?

Thanks!

Source: http://community.livejournal.com/apache/38566.html

Date: 08/29/07 (PHP Community)    Keywords: php, mysql, html, sql, apache

I've wrecked my setups enough times to be a pro at getting PHP, Apache, MySQL and Windows XP to all play together nicely. However, this time I'm running into a strange problem. I've got PHP 5.2.3 and Apache 2.0.59. Apache runs fine, PHP seems to run fine, phpinfo() shows everything as it should be. When I try to load anything that seems to have more than a single line in it, it doesn't look like it's parsing anything. I get a lot of broken bits of code showing on the screen. Things like '>' when used as operators are being parsed as HTML tags. These are scripts that ran fine on Sunday with Apache 1.0.3 and PHP 4.whatever. I'm having trouble deciphering exactly what it's doing or why, but it's obvious it's not working. I'm at an end here, for now. Anyone have any suggestions?

EDIT: Found it after staring at a script for half an hour. Know what it was? From PHP.INI:

short_open_tag = On

That was set to off. Of course I'm lazy and never actually type to start a script, however, my editor sometimes puts that in for me, which is why some scripts worked. I'd read about this setting, but never thought it might apply to me.