CloudLinux - HardenedPHP - CloudLinux Blog
Blog
CloudLinux OS feature review - out with the old, in with the new

CloudLinux OS feature review - out with the old, in with the new

CloudLinux OS feature review - out with the old, in with the new
Dear CloudLinux OS customers, In this post, I’d like to share with you some of the CloudLinux OS plans and I’ll focus on its PHP/performance features. I’ll dive in for a bit more details on some. 1. alt-php is now HardenedPHP Originally, when we released PHP Alternatives, we just wanted a way for web hosts to provide multiple versions of PHP to the...
Continue reading
Recent Comments
Guest — Richard
We've been watching Easy Apache 4's PHP selector and it doesn't currently seem that it will ever match Cloudlinux's PHP selector. ... Read More
Monday, 13 March 2017 17:42
Guest — Michal
I hope PHP Selector will be still suported for DirectAdmin? Built-in DA php switch is no alternative to PHP Selector from Cloudlin... Read More
Monday, 13 March 2017 18:16
Igor Seletskiy
there are no plans to discontinue PHP Selector for DirectAdmin
Monday, 13 March 2017 18:19
  16164 Hits
  12 Comments
PHP 5.3? CVE 2015-6835 ... what a mess
Tags:

PHP 5.3? CVE 2015-6835 ... what a mess

PHP 5.3? CVE 2015-6835 ... what a mess

Even though PHP 5.3 & 5.4 are still considered supported on CentOS -- sometimes it takes forever for CentOS/RHEL to fix a bug in there. CVE 2015-6835 is a perfect example. This particular bug came out of nowhere (well, people knew it was a bug, but they didn’t realize it was a huge security hole). Yet, once they did… it took days for the l...
Continue reading
  5473 Hits
  0 Comments
What’s inside HardenedPHP and why it matters for server security
Tags:

What’s inside HardenedPHP and why it matters for server security

What’s inside HardenedPHP and why it matters for server security
It’s been more than a year since we started our HardenedPHP project. The idea came out of discussions with multiple hosters who expressed their worry about running outdated versions of PHP. While their servers were secured with CageFS, they were still worried that hackers could have a field day with all the sites running PHP 4.4 or 5.1. Even though...
Continue reading
  5470 Hits
  0 Comments
HardenedPHP - another day, another security fix

HardenedPHP - another day, another security fix

HardenedPHP - another day, another security fix
Older versions of PHP are like swiss cheese - they are full of holes. More and more known holes appear with every passing day for PHP version 5.4 and older … holes that no one patches. This is where HardenedPHP comes in - it patches those holes so that your servers can remain secure. On Mar 31, 2016 new versions of PHP were released. With them...
Continue reading
Recent Comments
Guest — Chris Maxwell
Do the standard PHP packages issued by CloudLinux include the HardenedPHP patches/updates? For example, the package "php-5.3.3-46.... Read More
Saturday, 30 April 2016 20:02
WisiKlo WisiKlo
No, only alt-php packages have all the hardened PHP fixes. php-5.3.3 tracks RHEL php package.
Sunday, 01 May 2016 01:07
  5886 Hits
  2 Comments
Six vulnerabilities for PHP 5.4 found, more to come - and HardenedPHP will protect from them all

Six vulnerabilities for PHP 5.4 found, more to come - and HardenedPHP will protect from them all

Six vulnerabilities for PHP 5.4 found, more to come - and HardenedPHP will protect from them all
PHP 5.4 had a good run. Today’s still one of the most popular versions was first released in March 2012, but as of September 2015 PHP.net community is no longer providing security fixes for it. Of course, most sites can just upgrade to a more recent version, but not all. There are some backward incompatible changes that will require site ...
Continue reading
Recent Comments
Guest — Petar
I hope you will not abandon the PHP Selector after EA4 MultiPHP as discussed in the forums. I really doubt Cpanel will implement s... Read More
Saturday, 06 February 2016 06:16
WisiKlo WisiKlo
We are working hard to make HardenedPHP available with EA4 MultiPHP. It should be ready by the end of this month. We will not aban... Read More
Saturday, 06 February 2016 22:53
Guest — Scott Neader
I had the same concern as Petar, and I'm very glad to hear your plan, Igor. I think EA4 is a long way from being "production" so ... Read More
Monday, 08 February 2016 19:30
  9956 Hits
  3 Comments