Monday, November 17, 2014

Turning of php execution in certain Apache httpd directories to prevent remote execution

In cases where you have a php site hosted on Apache httpd, then you can disable php execution by setting the below directive in your httpd.conf and restarting httpd.

***********
<Directory "/var/www/upload">
php_flag engine off
</Directory>
***********

No comments:

Post a Comment