tomclegg.net/apache

Here are some patches and notes for Apache and PHP.

Patches

These patches are in the public domain.
 
• Apache 1.3.27 suexec env patch: allow PHPRC and LOCAL_* environment variables to pass through to CGI programs.
  patch-apache-suexec-env.txt (related: installing a custom php.ini file at kics.bc.ca)
   
• PHP 4 PATH_INFO patch: allow PHP scripts to use PATH_INFO when PHP is invoked as a CGI program using an Action handler. Use this if http://example.com/foo.php works but http://example.com/foo.php/bar causes an internal server error.
  patch-php-path-info.txt
• PHP 4 script ownership patch: add a suexec-style check to ensure that the script is owned by the current userid. (This prevents a user "evil" from using "/~innocent/php.cgi" as an Action in .htaccess files, which can otherwise allow the "evil" user to execute arbitrary commands as the "innocent" user.)
  patch-php-script-owner.txt
• The PATH_INFO and script ownership patches patch the same part of the same file, so here is a patch that does both at once.
  patch-php-script-owner-path-info.txt

Recipes

• /etc/make.conf for Apache 1.3.27:

  WITH_APACHE_SUEXEC=yes
  APACHE_SUEXEC_DOCROOT=/home
  DEFAULT_PATH=/usr/local/bin:/usr/bin:/bin:/var/qmail/bin

• Configure & build PHP 4 with mysql, pgsql, and various other stuff:

  PGPREFIX=/usr/local
  export PGPREFIX
  ./configure --enable-force-cgi-redirect --enable-trans-sid --enable-sockets \
              --enable-ftp --with-zlib --with-gd \
              --with-mhash=/usr/local --with-mcrypt=/usr/local \
              --with-mysql=/usr/local --with-pgsql=/usr/local
              --with-pear --enable-shared \
  && make

• Compile PHP 4.3.0 with OCI8 driver, using Oracle 8.1.5 running under Linux emulation on FreeBSD:
  • install linux_base-6.1 and linux_devtools-6.1 from ports, turn on linux compatibility in kernel, etc.
  • note: extra php features are less likely to work: mhash, zlib, etc
  • set ORACLE_HOME etc. as usual

    # LD_LIBRARY_PATH=$ORACLE_HOME/lib \
    CC=/compat/linux/usr/bin/gcc \
    ./configure --enable-force-cgi-redirect --with-pear --enable-static --with-oci8
    # vi main/php_config.h
      --- comment out #define HAVE_OCI8_ATTR_STATEMENT 1 ---
    # make
    # cp -p sapi/cgi/php /usr/local/bin/php-4.3.0-oci8.cgi
    # cp -p sapi/cli/php /usr/local/bin/php-4.3.0-oci8

  • You should probably patch suexec to allow ORACLE_* variables to be set in .htaccess and httpd.conf. Meanwhile, you can do something awful like this:

    #!/compat/linux/bin/sh
    export LD_LIBRARY_PATH=/oracle/HOME/lib
    export ORACLE_BASE=/oracle
    export ORACLE_HOME=/oracle/HOME
    export ORACLE_SID=ORCL
    export ORACLE_TERM=386x
    
    echo Content-type: text/html
    echo
    
    exec /usr/local/bin/php-oci8 <<'EOF'
    <?
    echo "OCILogon<P>";
    $db="";
    $conn=OCILogon("scott","tiger");
    echo "OCIServerVersion<P>";
    echo ociserverversion($conn); echo "<P>";
    echo "OCIParse<P>";
    $stmt=OCIParse($conn,"SELECT * FROM foo");
    echo "OCIExecute<P>";
    if(OCIExecute($stmt)) {
      echo "Being executed wasn't so bad<P>";
    }
    ?>

Note: None of this stuff has any kind of warranty.