&

PHP&Apache
Why httpd.conf is your new BFF!

Why httpd.conf is your new BFF!

PHP & Apache

Jeff Jones
AtlantaPHP
February 5th, 2009

Jump by reebs*
 Web “Solutions Stacks”
(Thanks Wikipedia!)

LAMP
Linux Apache MySQL PHP

WAMP
Windows Apache MySQL PHP

WIMP
Windows IIS MySQL PHP

LAPP
Linux Apache PostgreSQL PHP

FAPP
FreeBSD Apache PostgreSQL PHP

Common denominator? Apache. “yellow lamp“

 Apache Background

Since April 1996 Apache has been the most

popular HTTP server on the World Wide Web.
As of December 2008 Apache served over
51% of all websites.

“Fort Apache by PhillipC”

Apache Software Foundation
From ApacheCon 2007, Atlanta, GA

“ASF by Ted Leung”

Apache HTTP Server

“Geronimo's Camp”
“a patchy server”

Skydiving
“Needs more duct tape”
Full-Featured Web Server
Some Features...
 Authentication, Authorization,  Environment Variables
& Access Control Log Files

 CGI: Dynamic Content w/ CGI  Server Side Includes

 Configuration Files  URL Mapping

 Content negotiation  URL Rewriting

“Server” by existentist
 Apache Configuration
By handjes

Contexts
Server config: Server wide httpd.conf and included files.
VirtualHost: <VirtualHost></VirtualHost>
Directory: Directory,DirectoryMatch,Files,FilesMatch
.htaccess: Per directory config files.
 “PCI Slot” by Ryan

Apache Modules
#httpd.conf
httpd.conf
#Comment

#Directive
Include /usr/local/apache/conf/ssl.conf
Include /usr/local/apache/conf/vhosts/
Include /usr/local/apache/conf/a/*.conf

#Block Directive
<IfModule mod_rewrite.c>
RewriteEngine on
</IfModule> “Floppy” by Marcin Wichary
.htaccess

“Apple I & Altair” by Shiny Things

Scope Directives
VirtualHost
Directory / DirectoryMatch
Files / FilesMatch
Location/LocationMatch

“Radiance” by jurvetson
 Virtual Host

<VirtualHost 10.1.2.3>
ServerAdmin [email protected]
DocumentRoot /www/example.com
ServerName example.com
ErrorLog exlogs/error_log
TransferLog exlogs/access_log
</VirtualHost>

“CNN Hologram” by Hard Seat Sleeper

 Directory

<Directory />
</Directory>

<Directory /home/*>
</Directory>

“Dewey” by emdot
 DirectoryMatch

<DirectoryMatch "^/www/.*/[0-9]{3}">

</DirectoryMatch>
 Files

<Files admin.cgi>
Require group admin
</Files>
“Filed away..” by tpholland
 FilesMatch

<FilesMatch "\.(gif|jpe?g|png)$">

</FilesMatch>
“Alphabetical”
Location

“Lost” by w00kie
LocationMatch

“Little Blue Pins”

mod_core

“Earth Core”
 ErrorDocument “Coat Check Fail”

#Output a customized message.

ErrorDocument 403 "No Access”

#Redirect to a local URL-path.

ErrorDocument 404 /errors/404.php

#Redirect to an external URL.

ErrorDocument 500 http://example.com/5.php
 404 for pretty urls: Bad Idea!
(Hello mod_rewrite!)

ErrorDocument 404 index.php “Irony”

 KeepAlive “Zombie Jeff”

KeepAlive on
KeepAliveTimeout 2
MaxKeepAliveRequests 100
 TimeOut

TimeOut 300
“Hang up.” by Robert Brook
 UseCanonicalName

ServerName example.com
UseCanonicalName On

Request: www.example.com/secure
Redirects to: example.com/secure/

By Greyhorn
 mod_php

● php_value / php_flag
● php_admin_value / php_admin_flag
● Contexts: All, Perdir, System.
“php is cool” by Sara Golemon
 PHP Config Contexts

● PHP_INI_ALL
● PHP_INI_PERDIR
● PHP_INI_SYSTEM
 php_value

“Gratuitous Bacon”

php_value name value

 php_flag

php_flag name off|on “Wave the flags”

php_admin_(flag|value)

php_admin_flag safe_mode on
“The Flag”
 How is this useful?

“Mixer Detail”

Set PHP Configuration per directory, uri, or file.

 Prepend & Append

auto_prepend_file header.php
auto_append_file footer.php

auto_prepend_file none

“My Stapler”
 include_path

include_path=".;/php/includes"

include_path=".;C:/php/includes"
“Gahuti Trail” by Jeff Jones
 Turn that crap off!

php_flag magic_quotes_gpc off

php_flag register_globals off “Sausage King”

 Output Buffering

php_flag output_buffering on
php_value output_handler ob_tidyhandler
php_flag implicit_flushoff
“AOL Coasters”
 PHP Error Logging

log_errors stderr

php_value error_log /path/to/error.log

“Telex Machine”
 Display Errors

display_errors off
“Don't you feel secure?”
 mod_env
“Capitol Reef National Park” by W. Staudt

● Access via $_ENV[] or getenv();

 SetEnv

SetEnv webenv production

SetEnv webenv testing

SetEnv scriptdebug true

“Programmable Thermostat”
mod_mime

“Mime Typing...”
 AddType/Handler
AddType image/gif .gif

AddHandler php-script .php

#Not the best way:

AddType application/x-httpd-php .html

#better
AddHandler php-script .html

“Juggling Practice”
 ForceType/SetHandler
ForceType application/x-httpd-php

<Files *.php>
SetHandler php-script
</Files>

<Location /images>
ForceType image/jpeg
</Location>
 mod_negotiation
URI: foo

URI: foo.jpeg
Content-type: image/jpeg; qs=0.8

URI: foo.gif
Content-type: image/gif; qs=0.5

URI: foo.txt
Content-type: text/plain; qs=0.01
“Tough Negotiations”
 MultiViews
Set as part of directory options
MultiViews tracks down the best file.

<Directory /usr/local/www>
Options Indexes MultiViews
</Directory>

foo
foo.html.es
foo.html.en.gz “Sniffin'”
 mod_rewrite

http://httpd.apache.org/docs/1.3/mod/mod_rewrite.html

http://httpd.apache.org/docs/1.3/misc/rewriteguide.html

The Definitive Guide to Apache mod_rewrite

by Rich Bowen
http://apress.com/book/view/9781590595619 “The Vortex”
 Rewrite Rules

RewriteEngine On
RewriteBase /
RewriteCond /home/www/$1.php -f
RewriteRule ^(/?[^/\.]+)/$ /$1.php

“Tapping a pencil”
 RewriteRule Flags
RewriteEngine On
RewriteCond %{HTTP_HOST} ^.*website2.com
RewriteRule ^/?$ /website2.php [QSA, E=thedomain:website2,NC,L]

QSA = Query String Append

E = Set Environment Variables

NC=No Case

L=Last
 Rewrites & Redirects

RewriteCond %{HTTP_HOST} !=www.domain.com

RewriteRule (.*) http://www.domain.com/$1 [R=301,L]
 Front Controller

The Front Controller Pattern is a

software design pattern listed in
several pattern catalogs. The pattern
relates to the design of web
applications. It "provides a
centralized entry point for handling
requests."

Source: Wikipedia
 mod_auth
Other Auth & Related Modules
● mod_access
● Access control based on client hostname or IP address
● mod_auth_dbm
● User authentication using DBM files
● mod_auth_db
● User authentication using Berkeley DB files
● mod_auth_anon Apache 1.1 and up
● Anonymous user access to authenticated areas
● mod_digest
● MD5 authentication
 Basic Auth
.htpasswd .htgroups
username:md5(password) phpers: Tetraboy bdole
Tetraboy:crypt(password)
bramsey:md5(WildGarlic)
bdole:crypt(lbp)

AuthType Basic
AuthName "Apache Logins"
AuthUserFile /usr/apasswd/.htpasswd
AuthGroupFile /usr/apasswd/.htgroups

#Examples
Require user Tetraboy bramsey bdole
Require group phpers
Require valid-user
 PHP HTTP Auth
$_SERVER['PHP_AUTH_USER'] & $_SERVER['PHP_AUTH_PW']

<?php
if (!isset($_SERVER['PHP_AUTH_USER'])) {
header('WWW-Authenticate: Basic realm="My Realm"');
header('HTTP/1.0 401 Unauthorized');
echo 'Text to send if user hits Cancel button';
exit;
} else {
echo "<p>Hello {$_SERVER['PHP_AUTH_USER']}.</p>";
echo "<p>Your pass:{$_SERVER['PHP_AUTH_PW']}.</p>";
}
?>
 mod_headers

Header set|append|add header value

Header unset header

ErrorHeader
 Setting Headers

<Files *.css>
SetHandler php-script
Header Set Content-type “text/css”
</Files>
 PHP's Apache Extension
● apache_child_terminate — Terminate apache process after this request
● apache_get_modules — Get a list of loaded Apache modules
● apache_get_version — Fetch Apache version
● apache_getenv — Get an Apache subprocess_env variable
● apache_lookup_uri — Perform a partial request on a URI, returns info.
● apache_note — Get and set apache request notes
● apache_request_headers — Fetch all HTTP request headers
● apache_reset_timeout — Reset the Apache write timer
● apache_response_headers — Fetch all HTTP response headers
● apache_setenv — Set an Apache subprocess_env variable
● ascii2ebcdic — Translate string from ASCII to EBCDIC
● ebcdic2ascii — Translate string from EBCDIC to ASCII
● getallheaders — Fetch all HTTP request headers
“Trilions Served”
● virtual — Perform an Apache sub-request
apache_child_terminate();

“Terminator
 apache_lookup_uri
<?php
info = apache_lookup_uri('index.php?var=value');
var_dump($info);
?> stdClass Object
(
[status] => 200
[the_request] => GET /dir/file.php HTTP/1.1
[method] => GET
[mtime] => 0
[clength] => 0
[chunked] => 0
[content_type] => application/x-httpd-php
[no_cache] => 0
[no_local_copy] => 1
[unparsed_uri] => /dir/index.php?var=value
[uri] => /dir/index.php
[filename] => /home/htdocs/dir/index.php
[args] => var=value
[allowed] => 0
[sent_bodyct] => 0
[bytes_sent] => 0
[request_time] => 1074282764
)
 Apache HTTP Headers

<?php

apache_request_headers();

apache_response_headers();

?>
 Tip of Iceberg
● There are around 100 modules for Apache 1.3.x

● There are about 300 modules for Apache 2.x

● mod_rewrite can do amazing stuff with URIs

● Apache can be expanded with custom modules!

“Ice Breaker”
 “Books by Bowen”

Apache is a Web Server.

●
Don't rewrite a web server in PHP.
●
Unless you really have to.
 More info?
● http://httpd.apache.org/
● irc.freenode.net #apache
● http://planetapache.org/
● http://apache-cookbook.com/

“Theo Thinks”
 Questions?

● Why is the sky blue?

● Why is the moon white?
● Why is the grass green?
● Where do babies come from?

“Downtown ATL”