mod_userdir needs to be disabled if running PHP-FPM?

Metro2

• December 17, 2019 12:23

I'm hoping that someone can confirm that the Apache mod_userdir Tweak needs to be set to Disabled (in other words - remove the check mark from the box next to "Enable mod_userdir Protection" in WHM > Security Center > Apache mod_userdir Protection) if I have enabled PHP-FPM on all user accounts in a shared sever environment. I've been a bit confused on this issue because it was always recommended to Enable mod_userdir except for the Default/Nobody user, but in the current documentation at

• 

  SamuelM

  • December 17, 2019 21:15

  Hello @Metro2, Thank you for contacting cPanel! You are correct. When PHP-FPM is in use it is not possible to use mod_userdir. When enabling PHP-FPM, the system makes the required changes, and you do not need to manullay disable mod_userdir on your end. As noted on the Home >> Software >> MultiPHP Manager >> PHP Handlers page in WHM, "PHP Handlers do not apply to PHP-FPM." Therefore, even though the PHP Handler is set to suphp for all versions of PHP for your server, suphp will not be in use for accounts that have PHP-FPM enabled. I hope that clarifies the matter for you. Feel free to reach out with any additional questions! Best regards

  0
• 

  Metro2

  • December 17, 2019 21:42

  @cPSamuel - thank you very much for taking the time to respond and confirm that! Much appreciated!

  0

Please sign in to leave a comment.