Re: PHP session management

[Ivan Ristic <ivanr () webkreator com>]

> > Use CGI-PHP (with suexec) in a multi-user environment. With that
> > configuration each user (and PHP) has it's own UID. Playing with chroot
> > in suexec is a plus on security and your session files might be safe.
>
> If you're working w/ apache2, you can also use metuxmpm:
> http://www.metux.de/projects/mpm/

  Or, if you have to use Apache1, use the FastCGI module (you
  will then be able to have a copy of PHP per user or per host). You
  get the speed of a module and security of suexec (it can actually
  use suexec internally to start PHP instances).

--
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]