LAMP学习记录

访问控制白名单

[root@localhost extra]# vim httpd-vhosts.conf
<Directory /data/wwwroot/testdomain.com/admin/>
Order deny,allow
Deny from all
Allow from 127.0.0.1
</Directory>

[root@localhost extra]# /usr/local/apache2.4/bin/apachectl -t

Syntax OK

[root@localhost extra]# /usr/local/apache2.4/bin/apachectl graceful

[root@localhost www.111.com]# mkdir admin

[root@localhost www.111.com]# ls

123.php  admin  images  index.html

[root@localhost www.111.com]# cp 123.php  admin/

[root@localhost www.111.com]# ls

123.php  admin  images  index.html

[root@localhost www.111.com]# cd admin/

[root@localhost admin]# ls

1. php

 

<Filesmatch "admin.php(.*)">

 

 

 

 

禁止解析PHP

[root@localhost extra]# vim httpd-vhosts.conf

 

[root@localhost extra]# /usr/local/apache2.4/bin/apachectl -t

Syntax OK

[root@localhost extra]# /usr/local/apache2.4/bin/apachectl graceful

[root@localhost www.111.com]# mkdir upload

[root@localhost www.111.com]# cp 123.php  upload/

 

访问控制用户代理

[root@localhost extra]# vim httpd-vhosts.conf

        <IfModule mod_rewrite.c>

        RewriteEngine on

        RewriteCond %{HTTP_USER_AGENT} .*curl.* [NC,OR]

        RewriteCond %{HTTP_USER_AGENT} .*baidu.com.*[NC]

        RewriteRule .* - [F] </IfModule>

[root@localhost extra]# /usr/local/apache2.4/bin/apachectl -t

Syntax OK

[root@localhost extra]# /usr/local/apache2.4/bin/apachectl graceful

PHP基础配置

/usr/local/php/bin/php -i |grep -i "loaded configuration file"

Loaded Configuration File => (none)

[root@localhost ~]# cd /usr/local/src/php-5.6.30

[root@localhost php-5.6.30]# cp php.ini-production  /usr/local/php/etc/

[root@localhost php-5.6.30]# mv /usr/local/php/etc/p

pear.conf           php.ini-production  

[root@localhost php-5.6.30]# mv /usr/local/php/etc/p

pear.conf           php.ini-production  

[root@localhost php-5.6.30]# mv /usr/local/php/etc/php.ini-production   /usr/local/php/etc/php.ini

[root@localhost docs]# /usr/local/php/bin/php -i |grep -i "loaded configuration file"

Loaded Configuration File => /usr/local/php/etc/php.ini

PHP Warning:  Unknown: It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone. in Unknown on line 0

[root@localhost www.111.com]# vim 123.php

<?php

phpinfo();

?>

   

 

[root@localhost php-5.6.30]# vim /usr/local/php/etc/php.ini

 

 

[root@localhost php-5.6.30]# vim /usr/local/php/etc/php.ini

//搜索disable_functions

disable_functions=eval,assert,popen,passthru,escapeshellarg,escapeshellcmd,passthru,exec,system,chroot,scandir,chgrp,chown,escapeshellcmd,escapeshellarg,shell_exec,proc_get_status,ini_alter,ini_restore,dl,pfsockopen,openlog,syslog,readlink,symlink,1eak,popepassthru,stream_socket_server,popen,proc_open,proc_close

PHP日志相关配置

[root@localhost php-5.6.30]# vim /usr/local/php/etc/php.ini

 

 

 

 

[root@localhost extra]# /usr/local/apache2.4/bin/apachectl -t

Syntax OK

[root@localhost extra]# /usr/local/apache2.4/bin/apachectl graceful

 

[root@localhost www.111.com]# vim 123.php

<?php

pinfo();

?>          

 

 

PHP虚拟主机配置访问文件

[root@localhost extra]# vim httpd-vhosts.conf

 php_admin_value open_basedir "/usr/local/apache2.4/docs/www.111.com/upl

oad:/tmp/"

[root@localhost www.111.com]# /usr/local/apache2.4/bin/apachectl -t

Syntax OK

[root@localhost www.111.com]# /usr/local/apache2.4/bin/apachectl graceful

 

 

PHP配置访问文件

[root@localhost php-5.6.30]# vim /usr/local/php/etc/php.ini

 

PHP扩展模块安装

 

[root@localhost src]# wget http://pecl.php.net/get/redis-2.2.5.tgz

 

[root@localhost src]# tar -zxvf redis-2.2.5.tgz

 

[root@localhost redis-2.2.5]# ./configure --with-php-config=/usr/local/php/bin/php-config

[root@localhost redis-2.2.5]# make

[root@localhost redis-2.2.5]# make install

Installing shared extensions:     /usr/local/php/lib/php/extensions/no-debug-zts-20131226/

[root@localhost redis-2.2.5]# /usr/local/php/bin/php -i | grep extension_dir

extension_dir => /usr/local/php/lib/php/extensions/no-debug-zts-20131226 => /usr/local/php/lib/php/extensions/no-debug-zts-20131226

sqlite3.extension_dir => no value => no value

[root@localhost conf]# vim /usr/local/php/etc/php.ini