Topic: Joomla/php/fcgi

[Qmpeltaty]

Hi

I'm strugling to run Joomla as VH on my Apache. The first idea was to install mysql (as php and apache was already installed and configured), configure it with php and install Joomla. When i've done my Apache was crushing almoust every two hours. As i couldn't accept it i've disable php module and comment Joomla VH since i solve the problem. I found that the recommended way to do this is to run php through mod_fcgi to split up apache and php process. When setup has been finished, everything seems to be working. After 4 hours Apache (which supposed to be splitted up) has been stopped by OS (see screen below)


I don't know exact level of this threat but i think that if OS-based security
mechanism have been used it had to be at least major. Am i right ?

As i don't want to resign from using Joomla i would like to know how to secure it and prevent such problems in future (i belive that Jommla is well protected with default settings) and why Apache has been crushed - not Joomla site ?

I didn't find correspondent logs in event log and apache error log as the only errors found in apache error.log has been registered 20 minutes before apache has been stopped by DEP.

Error log :

[Steffen]

First try with the common env:

FcgidInitialEnv PHPRC "path to your php.ini"
FcgidInitialEnv PATH "path to your php;C:/WINDOWS/system32;C:/WINDOWS;C:/WINDOWS/System32/Wbem;"
FcgidInitialEnv SystemRoot "C:/Windows"
FcgidInitialEnv SystemDrive "C:"
FcgidInitialEnv TEMP "C:/WINDOWS/Temp"
FcgidInitialEnv TMP "C:/WINDOWS/Temp"
FcgidInitialEnv windir "C:/WINDOWS"

and

replace AddType application/x-httpd-php .php

with AddHandler fcgid-script .php

Steffen

[Qmpeltaty]

What about the OS reaction ? What kind of threat it was ?

I'm really focused on the security (this is my first goal) so before i'll update my config with paths to OS directory(thank you Steffen) i must be sure if its safe.