Решил провести небольшое исследование: какие способы выполнения скриптов используют хостеры, и где возможно выполнение своих бинарных файлов через system(). Задавал следующие вопросы:
Hello! I have some questions about the hosting:- Do you support script execution via mod_php and mod_perl? Or execution via CGI (mod_cgi, Fast CGI?) is only available?
- Can I execute external binaries via, e.g. 'exec()' PHP function?
Thanks.
Добрый день!
1) Скажите пожалуйста, PHP и Perl скрипты запускаются через интерфейс CGI (mod_cgi, Fast CGI?) или при помощи модулей mod_php/mod_perl для Apache?
2) Можно ли запускать из скрипта свои бинарные файлы, например через 'system' или 'exec' ?
Спасибо.
www.exclusivehosting.net (+)
Thank you for manifesting interest in our web hosting services.
You are free to use CGI scripts on our servers as there is no
limitation on their location (you could place them in any folder
available in the account). As to your second inquiry – our answer
is – yes, you can do that on both plans of ours.
www.slavhost.com (+)
Здравствуйте!
Скрипты запускаются при помощи модулей Apache.
Также можно запускать скрипты из каталога cgi-bin написанные на Perl, Python.
Информация о сервере имеется в cPanel, слева внизу.
www.hoster.ru (+)
PHP установлен как модуль, Perl как CGI
Должно работать, если все правильно было скомпилировано.
www.ixwebhosting.com (-)
manoj: We do have CGI for scripting
manoj: You cannot use external binaries
www.hostmonster.com (-)
Due to security precautions, we currently do not have, or have plans to have, a system with mod_php
www.nuportalcity.com – (help is here: my-online-help.com/User Ticket List.aspx?)
hosting.webrise.ru
www.valuehost.ru (+)
1) Через mod_php
2) Можно
bluehost.com (-)
We currently do not have, and have no plans to create a system with mod_php. This is due to security precautions. Execution for perl is via CGI is available however mod_perl is not. Also you can run the exec() function in php.
www.Lunar Pages.com?
www.34sp.com/hosting (-)
We use both – we run as standard mod_php and mod_perl, mod_python, but we
also offer php and perl and python as true cgi when running from the 'cgi-bin'
We run mod_php under safemode but our phpcgi's
(support.34sp.com/phpcgi) are run with safemode off so can run
binaries if necessary – we run this primarily for scripts such as gallery2
and mambo/joomla.
www.hostgator.com (-)
All of our new servers use CGI only
www.skyhost.ru (-)
php4 как модуль Апаче, php5 – fastCGI
'system' или 'exec' отключены по соображениям безопасности
www.invision.com.ua (+)
1) PHP работает как модуль Apache.
2) Да, такая возможность есть.
binargi.biz
www.lx-host.net (+)
1. Оба способа работают
2. Да, можно
www.a-hosting.com.ua
www.jsp-develop.de/hosting/
hosting.rbc.ru (-)
1) Зависит от сервера, на котором расположен Ваш хостинг, для новых серверов CGI через suexec, fast_cgi нет
2) Свои исполняемые файлы можно запускать через cgi
www.cloud9.net (±)
PHP is built as a module on our web server, perl is not.
I don't believe that we have any restriction set on being able to do an exec in PHP.
www.fuitadnet.com
www.hosting-unlimited.net (-)
Please be informed that in our new cluster PHP runs as a CGI now,
and we have mod_security enabled. Execution of external binaries are currently enabled.
www.goldseal-solutions.co.uk
www.a2hosting.com (?)
A2 Hosting offers PHP as an Apache module, not as a CGI binary. Thus, clients can take advantage of the benefits of using PHP as an Apache module. A command line version of PHP is available for cron jobs or other purposes.
www.ultrasurge.com (-)
None of those are supported.
Disabled for security reasons.
www.1hostplan.com
www.ideanode.com (-+)
Right now it's mod_perl, but we're likely moving to a
Fast CGI? configuration in the near future (to allow for better separation and the ability to toggle easily between PHP versions, etc).
We'll be rolling out a VPS solution by the end of the year that will give you the ability to compile your own binaries and control your environment, but that's not a feature we currently offer with shared hosting.
www.thathostingplace.com (-)
I'm sorry to say that we don't allow our users to execute external
binaries via exec for security reasons. We've had problems with this
in the past and have had to restrict access to certain functions in
php that allow that sort of behavior. We do offer mod_perl support
but I'd have to look into mod_php as I'm not sure off the top of my
head.
www.portalwebhosting.com
www.foraker.com
www.haisoft.net (+)
Yes, you can use mod_perl and PHP scripts as well as CGI. You can also
run external scripts using the exec() PHP function.
www.athletewebservices.com
Weblink India.net?
blacknight.ie (+)
Both mod_php and mod_perl are enabled on our shared hosts.
exec() is also enabled.
The only place
Fast CGI? is being used at the moment is for our Ruby On Rails hosting.
goldhost.ru (-)
1) Модуль апача.
2) К сожалению, нет.
hosting.vingrad.ru (-)
1. Мы используем mod_php
2. Свои бинарные файлы нельзя запускать.
www.alexhost.ru
www.imhoster.net (-)
1) PHP как модуль Apache
2) нет
www.fairhost.ru
host.gbg.bg (-)
1) we support mod_php, CGI=php4,php5,perl,python without CGI php/perl/python.
2) yes, but only with cgi version of php.
www.telekom.ru
hosting.bcc.uz
www.flyhost.ru
ruhost.org (-)
1) CGI
2) Нет
www.best-hosting.ru (-)
1) Оба варианта возможны для php, переключать способ интерпретации
php-скриптов можно через панель управления. Perl-скрипты запускаются только как CGI.
2) Можно, если php запущен как CGI.
www.peterhost.ru (+)
1) PHP есть в двух варианта. Perl только как CGI-приложение.
2) Возможно.
www.metrahost.ru (+)
mod_php/mod_perl
Да, можно, только бинарий сначало нужно скомпилировать, а потом уже запускать.
www.alinet.ru
iname.com.ua
www.web-mania.com (-)
We provide support to mod_cgi, mod_php, mod_perl but we dont support
Fast CGI?.
Due to security reason we have enabled safe_mode hence you will not be able to use the php function exec()
Всего: 50
Ответили: 31
Уязвимые: 11