운영중인 CMS에 어울리는 php 버전을 선택해주세요.

라이브러리

# yum install libxml2-devel openssl-devel bzip2-devel curl-devel libjpeg-devel libpng-devel freetype-devel gmp-devel ncurses-devel unixODBC-devel pspell-devel net-snmp-devel libmcrypt-devel mysql-devel libtool-ltdl-devel

Suhosin (수호신)

http://www.hardened-php.net/suhosin/download.html

# wget http://download.suhosin.org/suhosin-patch-5.3.9-0.9.10.patch.gz
# gunzip suhosin-patch-5.3.9-0.9.10.patch.gz
# wget http://kr.php.net/distributions/php-5.3.10.tar.gz
# tar xvfz php-5.3.10.tar.gz
# yum install patch
# cd php-5.3.10
# patch -p 1 -i ../suhosin-patch-5.3.9-0.9.10.patch

다운로드 / 컴파일

# cd php-5.3.10
# ./configure --prefix=/usr/local/php --with-apxs2=/usr/local/apache/bin/apxs --with-mysql=mysqlnd --with-mysqli --disable-magic-quotes --disable-dmalloc --enable-bcmath --enable-gd-native-ttf --enable-inline-optimization --enable-mbstring --enable-mbregex --enable-gd-native-ttf --enable-ftp --with-jpeg-dir --with-freetype-dir --with-curl --with-zlib --with-gd --with-iconv --disable-debug --with-mcrypt --enable-suhosin --enable-exif --enable-sysvsem --enable-sysvshm
# make && make install
# cp php.ini-production /usr/local/php/lib/php.ini

php.ini

# vi /usr/local/php/lib/php.ini

expose_php = Off
post_max_size = 200M
allow_url_fopen = Off
date.timezone = "Asia/Seoul"
open_basedir = "/tmp:/home/"
disable_functions=exec,passthru,shell_exec,system,proc_open,popen,curl_exec,curl_multi_exec,parse_ini_file,show_source
memory_limit=64M ; 32M 일 경우 XE Core 쉬운설치시 문제가 발생할 수 있습니다

Apache 연동

# vi /usr/locala/apache/conf/httpd.conf

관련문서

• PHP security settings
• LAMP 시스템 조율, Part 2: 아파치와 PHP 최적화
• LAMP 애플리케이션을 조정하는 다섯 가지의 간단한 방법
• PHP 보안의 약방의 감초 open_basedir