Caching, when properly configured, can instruct user's browsers to locally store and reuse previously fetched resources. This ensures faster page loads for returning users, as their browsers can retrieve …
Read More

Disabling access to certain directories in Apache is a common practice for security and privacy. Restricting access ensures that unauthorized users cannot access sensitive data or files.

…
Read More

A reverse proxy server acts as an intermediary for requests from clients seeking resources from other servers. It provides an additional layer of abstraction and control to ensure the …
Read More

The Apache web server, one of the most widely used web servers globally, operates under specific user and group permissions. These permissions determine which files and directories the server …
Read More

The DocumentRoot is a directive in the Apache web server that specifies where the web files for a particular domain or virtual host reside. By default, many distributions like …
Read More

Caching, when properly configured, can instruct user's browsers to locally store and reuse previously fetched resources. This ensures faster page loads for returning users, as their browsers can retrieve …
Read More

Apache normally runs as an unprivileged user without shell access in most platforms. This is for security reason as a poorly written script or configuration if exploited will not escalate and cause much harm to the system.

If you’re running a development environment and know exactly what you’re doing, you can change the user and group that the Apache process runs as with these simple steps;

1. Find User and Group directives in Apache‘s configuration file.

   Apache configuration files

2. Set the user and group that you want Apache process to run as. The following example is to run it as root.

   User root
   Group root

   This could be a big security risk, especially to run it as root.

   Make sure the user and group has appropriate permission to DocumentRoot and related files and folders.

3. Restart Apache.

   How to restart Apache service

4. Check if the changes was successful

   $ ps aux | grep apache2
   root      1188  0.0  0.1 162184  6664 ?        Ss   Mar29   0:02 /usr/sbin/apache2 -k start
   root  1197  0.0  0.1 162184  5668 ?        S    Mar29   0:00 /usr/sbin/apache2 -k start
   root  1198  0.0  0.1 162184  5916 ?        S    Mar29   0:00 /usr/sbin/apache2 -k start
   root  1200  0.0  0.1 162184  5684 ?        S    Mar29   0:00 /usr/sbin/apache2 -k start
   root  1201  0.0  0.1 162184  5684 ?        S    Mar29   0:00 /usr/sbin/apache2 -k start
   root  1202  0.0  0.1 162184  5684 ?        S    Mar29   0:00 /usr/sbin/apache2 -k start

   In some distributions the Apache binary could be named httpd instead of apache2.

You will get the below error when logging in to phpMyAdmin without password even if your actual MySQL account itself is passwordless. This is because phpMyAdmin is normally configured to disable passwordless login due to security reasons.

To enable passwordless MySQL login in phpMyAdmin, you’ll need to set AllowNoPassword option in phpMyAdmin‘s configuration to TRUE.

To enable the option, uncomment or add the following line;

$cfg['Servers'][$i]['AllowNoPassword'] = TRUE;

Depending on distributions, there could be multiple occurrences of that particular line. Ubuntu for example has the following 2 lines;

if (!empty($dbname)) {
    // other configuration options
    $cfg['Servers'][$i]['AllowNoPassword'] = TRUE;
    // it should be placed before the following line
    $i++;
}

// other configuration options
$cfg['Servers'][$i]['AllowNoPassword'] = TRUE;

Error warnings for PHP are helpful during development, where you can use them for debugging. Showing the same errors and warnings in a production environment could pose a security …
Read More

PHP allows specific functions to be disabled to avoid misuse and for security reasons. It is used to harden a PHP deployment, especially in a shared hosting environment.

…
Read More