FreshPorts -- The Place For Ports Sat, 17 May 2008 5:57 AM BST
FreshPorts is now runing off the BETA server. Enjoy for now.
Port details
suphp 0.6.3 www on this many watch lists=12 search for ports that depend on this port An older version of this port was marked as vulnerable.
Securely execute PHP scripts under Apache
Maintained by: koitsu@FreeBSD.org search for ports maintained by this maintainer
Port Added: 25 Jun 2003 07:51:25


suPHP is a combination of an Apache module (mod_suphp) and an
executable which provides a wrapper for PHP. With both
together, it is possible to execute PHP scripts with the
permissions of their owner without having to place a PHP
binary in each user's cgi-bin directory. suPHP doesn't need
Apache's suExec, provides a logging function and support for
different php.ini's. 

WWW: http://www.suphp.org/
CVSWeb : Sources : Main Web Site : Distfiles Availability : PortsMon
Required To Build: www/apache20, devel/automake19, devel/autoconf261, devel/libtool15
Required To Run: lang/php5, www/apache20

To install the port: cd /usr/ports/www/suphp/ && make install clean
To add the package: pkg_add -r suphp


Configuration Options
     No options to configure

Master Sites:
http://www.suphp.org/download/
ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/koitsu/
ftp://ftp.se.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/koitsu/
ftp://ftp.uk.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/koitsu/
ftp://ftp.ru.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/koitsu/
ftp://ftp.jp.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/koitsu/
ftp://ftp.tw.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/koitsu/
ftp://ftp.cn.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/koitsu/
ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/
Notes from UPDATING
These upgrade notes are taken from /usr/ports/UPDATING
  • 2007-12-15
    Affects: users of www/suphp
    Author: koitsu@FreeBSD.org
    Reason: 
      The suPHP port has been upgraded to 0.6.2.  This update requires
      modifications to your Apache httpd.conf, as the new version of suPHP does
      things differently than the previous version -- particularly in regards
      to how AddHandler is used.
    
      Previously, enabling suPHP was as simple as:
    
    	suPHP_Engine on
    	AddType application/x-httpd-php .php
    	AddHandler x-httpd-php .php
    
      With suPHP 0.6.2, these should be changed to:
    
    	suPHP_Engine on
    	AddType application/x-httpd-php .php
    	suPHP_AddHandler application/x-httpd-php
    
      If you forget this change, your PHP content will likely be offered as
      downloadable content and not parsed by the PHP interpreter!
    
      Additionally, the new version uses a configuration file vs. compile-time
      settings.  The configuration file is /usr/local/etc/suphp.conf, and a
      working example installed as /usr/local/etc/suphp.conf-example.  It's
      important that the MIME type under the [handlers] section matches what
      the type passed to suPHP_AddHandler in your Apache configuration.
    
    

Number of commits found: 31

Commit History - (may be incomplete: see CVSWeb link above for full details)
DateByDescription
30 Mar 2008 23:49:07
Original commit files touched by this commit  0.6.3
koitsu search for other commits by this committer
- Update to 0.6.3, to address security holes pertaining to symlinks
  when running in "owner" mode (the default).
  http://lists.marsching.biz/pipermail/suphp/2008-March/001750.html

Security:      
http://lists.marsching.biz/pipermail/suphp/2008-March/001750.html
26 Mar 2008 16:41:30
Original commit files touched by this commit  0.6.2
 This port version is marked as vulnerable.
koitsu search for other commits by this committer
* Pipe is not slash.  *sigh*
26 Mar 2008 16:25:20
Original commit files touched by this commit  0.6.2
  Sanity Test Failure This port version is marked as vulnerable.
koitsu search for other commits by this committer
* Maintainer freebsd@jdc.parodius.com --> koitsu@FreeBSD.org (I'm both)
* Add some redundancy fetch locations to MASTER_SITE_LOCAL.
12 Dec 2007 17:27:49
Original commit files touched by this commit  0.6.2
 This port version is marked as vulnerable.
koitsu search for other commits by this committer
Fix for previous commit; user reported privately that Apache would print
"Cannot get media type from 'x-httpd-php'" as a warning in the ErrorLog.  Issue
caused by incorrect AddType syntax.

This commit fixes the pkg-message syntax described, as well as the example
suphp.conf to reflect the proper type (value "application/x-httpd-php", not
"x-httpd-php").

Submitted by:   <dark@aspu.ru>
11 Dec 2007 20:38:59
Original commit files touched by this commit  0.6.2
 This port version is marked as vulnerable.
koitsu search for other commits by this committer
Upgrade to suPHP 0.6.2.  This upgrade is quite major; it introduces
numerous features necessary for hosting, adds the use of a configuration
file (vs. compile-time settings) for configuration details, and is
presently supported by the software author.

Changes to httpd.conf are required for this to work, otherwise PHP
content is offered for download and not parsed.  pkg-message contains
full migration details, but here's the simple version:

suPHP 0.5.2                            suPHP 0.6.2
===========                            ===========
AddType application/x-httpd-php .php   AddType x-httpd-php .php
AddHandler x-httpd-php .php            suPHP_AddHandler x-httpd-php

Tested on RELENG_6 and RELENG_7, using Apache 2.0 and 2.2, with the
help of the PR submitter.

Testing for Apache 1.3 was not performed, thus the port requires the
use of 2.0 or later.  suPHP 0.6.2 does support Apache 1.3, but I'll
need someone running 1.3 to work with me on fixing the port to support
it, if desired.

PR:             ports/116281
Submitted by:   Vladimir Korkodinov <viper@perm.raid.ru>
10 May 2006 23:23:14
Original commit files touched by this commit  0.5.2_2
 This port version is marked as vulnerable.
pav search for other commits by this committer
- Fix for recent PHP changes, correct path to php-cgi binary
- Add user-overridable variable SUPHP_PATH
- Cosmetics

PR:             ports/97047
Submitted by:   Jeremy Chadwick <freebsd@jdc.parodius.com> (maintainer)
06 May 2006 15:31:30
Original commit files touched by this commit  0.5.2_1
 This port version is marked as vulnerable.
ale search for other commits by this committer
Fix or remove obsolate or broken ways to depend on php.
08 Apr 2006 13:56:16
Original commit files touched by this commit  0.5.2_1
 This port version is marked as vulnerable.
pav search for other commits by this committer
- Add support for Apache 2.2

PR:             ports/94034
Submitted by:   Craig Boston <craig@yekse.gank.org>
Approved by:    Jeremy Chadwick <freebsd@jdc.parodius.com> (maintainer)
24 Jan 2006 03:14:23
Original commit files touched by this commit  0.5.2_1
 This port version is marked as vulnerable.
edwin search for other commits by this committer
SHA256ify

Approved by: krion@
04 Dec 2005 00:18:15
Original commit files touched by this commit  0.5.2_1
 This port version is marked as vulnerable.
clement search for other commits by this committer
- prepare removal of www/apache2 in favor of www/apache20 for naming
  consistency
- add entries in UPDATING (for apache22 too)

PR:             ports/78119
Repocopied by:  marcus
28 Oct 2004 19:29:16
Original commit files touched by this commit  0.5.2_1
 This port version is marked as vulnerable.
pav search for other commits by this committer
- Avoid make -C fixing build on FreeBSD 4.8 and older
- Expand CONFLICTS
- Style

PR:             ports/73226
Submitted by:   Jeremy Chadwick <freebsd@jdc.parodius.com> (maintainer)
12 Aug 2004 10:31:51
Original commit files touched by this commit  0.5.2_1
 This port version is marked as vulnerable.
vs search for other commits by this committer
- Fix "make -C"-issues
- Unregister from Apache through apxs on deinstall
- Cleanup

PR:             ports/70345
Submitted by:   Jeremy Chadwick (maintainer)
27 Jul 2004 08:48:41
Original commit files touched by this commit  0.5.2
 This port version is marked as vulnerable.
vs search for other commits by this committer
Needs 'make -C', available since 4.9.

PR:             ports/69624
Submitted by:   Jeremy Chadwick (maintainer)
23 Jul 2004 08:29:47
Original commit files touched by this commit  0.5.2
 This port version is marked as vulnerable.
arved search for other commits by this committer
Change logic of the LOGFILE path:
        Assuming the user DOES NOT specify the
        LOG_PATH variable upon build (by default, it's empty).
        The logfile will end up in / (a.k.a. /suphp.log)

PR:             69334
Submitted by:   Jeremy Chadwick <freebsd@jdc.parodius.com>
17 Jul 2004 18:34:03
Original commit files touched by this commit  0.5.2
 This port version is marked as vulnerable.
pav search for other commits by this committer
- Unbreak on 4.x: adapt make(1) syntax

PR:             ports/69139
Submitted by:   Jeremy Chadwick <freebsd@jdc.parodius.com> (maintainer)
15 Jul 2004 23:13:36
Original commit files touched by this commit  0.5.2
 This port version is marked as vulnerable.
clement search for other commits by this committer
- Update to 0.5.2
  Add a workaroung to make it work with apache 2 (due to an apr bug)
  (so be careful)
- Pass maintainership to submitter

PR:             ports/69048
Submitted by:   Jeremy Chadwick <freebsd@jdc.parodius.com>
29 Jun 2004 13:21:20
Original commit files touched by this commit  0.5.1
 This port version is marked as vulnerable.
clement search for other commits by this committer
- s/--enable-setid-mode/--with-setid-mode/

Reported by:    Andries Filmer <andries@netexpo.nl>
29 Jun 2004 11:40:08
Original commit files touched by this commit  0.5.1
 This port version is marked as vulnerable.
clement search for other commits by this committer
- Add WITH_LOGNAME and WITH_LOGPATH knobs.
  I kept LOG_NAME to not break POLA (Will be removed for next release).

Requested by:   Dennis Koster <dennis@phlex.net>
20 Mar 2004 12:38:50
Original commit files touched by this commit  0.5.1
 This port version is marked as vulnerable.
clement search for other commits by this committer
Fix mispelled CONFIGURE_ARGS option

Spotted by:     Johan Mulder <johan@localhost.nl>
25 Feb 2004 11:47:24
Original commit files touched by this commit  0.5.1
 This port version is marked as vulnerable.
clement search for other commits by this committer
- Update to 0.5.1

This version is mainly a bugfix release, fixing a bug causing a
segmentation fault in the Apache 2 module and improving the handling
of environment variables. Instead of setting unneeded / unwanted
environment variables to an empty string, they are now completely
removed from the environment.
07 Feb 2004 17:16:21
Original commit files touched by this commit  0.5_2
 This port version is marked as vulnerable.
clement search for other commits by this committer
- SIZEify distinfo
04 Feb 2004 05:10:27
Original commit files touched by this commit  0.5_2
 This port version is marked as vulnerable.
marcus search for other commits by this committer
Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.

(Part 1)
14 Jan 2004 20:28:58
Original commit files touched by this commit  0.5_1
 This port version is marked as vulnerable.
clement search for other commits by this committer
- Fix suPHP.
- Bump PORTREVISION

Noticed by:         Starhost.nl - N.Elsten <elsten@starhost.nl>
Approved by:        erwin (mentor) (implicitly)
13 Jan 2004 15:04:51
Original commit files touched by this commit  0.5
 This port version is marked as vulnerable.
clement search for other commits by this committer
- Update my email address

Approved and reviewed by:    erwin (mentor)
11 Jan 2004 15:53:56
Original commit files touched by this commit  0.5
 This port version is marked as vulnerable.
clement search for other commits by this committer
Update to 0.5
now suPHP supports apache2.

Approved by:    erwin (mentor) (implicitly)
07 Nov 2003 09:12:58
Original commit files touched by this commit  0.3.1
 This port version is marked as vulnerable.
marcus search for other commits by this committer
Use the new Apache bits from bsd.port.mk.

Submitted by:   dinoex
07 Oct 2003 01:49:16
Original commit files touched by this commit  0.3.1
 This port version is marked as vulnerable.
leeym search for other commits by this committer
Update to 0.3.1

PR:             57681
Submitted by:   Clement Laforet <sheepkiller@cultdeadsheep.org>
Release
25 Aug 2003 13:13:36
Original commit files touched by this commit  0.3
 This port version is marked as vulnerable.
edwin search for other commits by this committer
[update] www/suphp: update to 0.3 and fix a security leak introduced with
previous patch

        - update to 0.3
        - add a workaround to don't use getpwuid to performs check for apache
user (since 4.x
          doesn't support getpwuid_r).
        - use %%DOCSDIR%%

PR:             ports/55952
Submitted by:   Clement Laforet <sheepkiller@cultdeadsheep.org>
17 Jul 2003 05:35:53
Original commit files touched by this commit  0.2.3_1
 This port version is marked as vulnerable.
daichi search for other commits by this committer
fix www/suphp:
  - fix critical problem, due to wrong dependency.
    lang/php4-cli -> www/php4-cgi

PR:             54558
Submitted by:   Clement Laforet <sheepkiller@cultdeadsheep.org> (maintainer)
30 Jun 2003 05:56:55
Original commit files touched by this commit  0.2.3
 This port version is marked as vulnerable.
daichi search for other commits by this committer
update www/suphp: 0.2.2 --> 0.2.3
    * update suphp to 0.2.3
    * fix bento build (apxs related problem)
    * Separate build/install stages for mod_suphp

PR:             53873
Submitted by:   Clement Laforet <sheepkiller@cultdeadsheep.org>
Pointed out by: bento via kris
25 Jun 2003 07:50:53
Original commit files touched by this commit  0.2.2_1
 This port version is marked as vulnerable.
daichi search for other commits by this committer
Add suphp 0.2.2,
suPHP is a combination which provides a wrapper
for PHP.

PR:             42790
Submitted by:   Clement Laforet <sheepkiller@cultdeadsheep.org>

Number of commits found: 31

Login
User Login
Create account

Servers and bandwidth provided by
New York Internet
SuperNews

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
py-djangoMay 14
py-django-develMay 14
vorbis-toolsMay 11
qemuMay 08
qemu-develMay 08
swfdecMay 07
firefox*May 03
firefox-devel*May 03
firefox10*May 03
firefox15*May 03
flock*May 03
linux-firefox*May 03
linux-firefox-devel*May 03
linux-flock*May 03
linux-seamonkey*May 03

8 vulnerabilities affecting 22 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds


Statistics
Graphs
Traffic

Calculated hourly:
Port count 18471
Broken 176
Deprecated 58
Ignore 584
Forbidden 4
Restricted 412
No CDROM 126
Vulnerable 52
Expired 33
Set to expire 37
Interactive 76
new 24 hours 6
new 48 hours9
new 7 days20
new fortnight54
new month157

This site
What is FreshPorts?
About the Authors
FAQ
How big is it?
The latest upgrade!
Privacy
Forums
Blog
Contact

Add tab to Netscape 6

Servers and bandwidth provided by
New York Internet
SuperNews
Valid HTML, CSS, and RSS.
Copyright © 2000-2008 DVL Software Limited. All rights reserved.
This page created in 0.83 seconds.