Knowledge Base

PHP Settings

Choose one of the following PHP handlers at Hosting Parameters >
PHP handler type taking into consideration resources consumption and
security aspects of each option:

	Performance	Memory Usage	Security
Apache module (Linux only)	High. Runs as a part of the Apache web server.	Low	This handler (also known as mod_php) is the least secure option as all PHP scripts are executed on behalf of the `apache` user. This means that all files created by PHP scripts of any plan subscriber have the same owner (`apache`) and the same permission set. Thus, there is a theoretical possibility that some users will try to affect files of another users or some important system files. Note: You can evade some security issues by turning the PHP safe_mode option on. It disables a number of PHP functions that bring potential security risk. Note that this may lead to inoperability of some web apps. The safe_mode option is considered to be obsolete and is deprecated in PHP 5.3.
ISAPI extension (Windows only, not supported since PHP 5.3)	High. Runs as a part of the IIS web server.	Low	The ISAPI extension can provide site isolation in case a dedicated IIS application pool is switched on for subscriptions. Site isolation means that sites of different customers run their scripts independently. Thus, an error in one PHP script does not affect the work of other scripts. In addition, PHP scripts run on behalf of a system user associated with a hosting account. Note: The ISAPI extension handler is not supported since PHP 5.3.

…

Related Posts

An Overview of PHP Vulnerabilities – WordPress Perspective

Strengthening PHP settings in Obsidian and the new PHP Composer

Knowledge Base

IIS Web Server Settings – Directory Security Settings

Optimizing Apache Web Server – Setting Up the Apache Restart Interval

IIS Web Server Settings – Common Settings

(Plesk for Windows) Performance

Hosting Wiki