{"id":375,"date":"2011-06-05T18:46:21","date_gmt":"2011-06-05T10:46:21","guid":{"rendered":"http:\/\/www.hmqq.net\/?p=375"},"modified":"2017-02-12T21:45:44","modified_gmt":"2017-02-12T13:45:44","slug":"ngnix-php-fpm-chroot","status":"publish","type":"post","link":"https:\/\/minqiao.me\/?p=375","title":{"rendered":"Ngnix + PHP-FPM chroot"},"content":{"rendered":"<p>Nginx+PHP-FPM\u662f\u76ee\u524d\u7528\u5f97\u6bd4\u8f83\u591a\u7684\u7ec4\u5408\uff0c\u5982\u679c\u5728\u4e00\u53f0\u670d\u52a1\u5668\u4e0a\u9762\u8dd1\u591a\u4e2a\u7ad9\u70b9\uff0c\u5f53\u4e00\u4e2a\u5b89\u5168\u6027\u6bd4\u8f83\u5dee\u7684\u7ad9\u70b9\u88ab\u5165\u4fb5\u4e4b\u540e\uff0c\u5176\u4ed6\u7f51\u7ad9\u4e5f\u5c31\u65e0\u5b89\u5168\u6027\u53ef\u8a00\u4e86\u3002PHP-FPM\u652f\u6301chroot\u529f\u80fd\uff0c\u80fd\u591f\u89e3\u51b3\u524d\u9762\u63d0\u5230\u7684\u5b89\u5168\u95ee\u9898\uff0c\u53ea\u662f\u8fd9\u529f\u80fd\u9ed8\u8ba4\u6ca1\u542f\u7528\uff0c\u914d\u7f6e\u4e5f\u7a0d\u6709\u70b9\u9ebb\u70e6\u3002<br \/>\nPHP-FPM\u7684chroot\u914d\u7f6e\u53ef\u4ee5\u53c2\u8003\u4ee5\u4e0b\u65b9\u5f0f\uff1a<\/p>\n<p>1\u3001\u4fee\u6539php-fpm\u914d\u7f6e\u6587\u4ef6\uff0c\u5982A\u7f51\u7ad9\u7684\u914d\u7f6e\u6587\u4ef6\u4e3a\/etc\/php-fpm.d\/a.conf\uff0c\u5728a.conf\u4e2d\u589e\u52a0<br \/>\n<strong>chroot = \/var\/www\/a<\/strong><\/p>\n<p>2\u3001\u4fee\u6539nginx\u7684\u865a\u62df\u4e3b\u673a\u914d\u7f6e<br \/>\nfastcgi_param  SCRIPT_FILENAME <strong> \/var\/www\/a\/<\/strong>$fastcgi_script_name;<br \/>\n\u8981\u6539\u4e3a<br \/>\nfastcgi_param  SCRIPT_FILENAME  $fastcgi_script_name;<br \/>\n<!--more--><br \/>\n3\u3001\u5efa\u7acb\u5fc5\u8981\u7684\u76ee\u5f55\uff0c\u590d\u5236\u6587\u4ef6\u3002<\/p>\n<pre class=\"brush: plain; title: ; notranslate\" title=\"\">\r\nmkdir tmp etc lib64 bin\r\ncp \/etc\/hosts \/etc\/resolv.conf \/etc\/nsswitch ykdhttb.conf \/etc\/localtime etc\r\ncp \/lib64\/libnss_dns.so.2 lib64  #\u57df\u540d\u89e3\u6790\u9700\u8981\uff0c32\u4f4d\u7684\u7cfb\u7edf\u5c31\u590d\u5236\/lib\/libnss_dns.so.2\r\nchmod 1777 tmp\r\nmkdir -p var\/lib\/php\/session  #php.ini\u7684session.save_path\u8bbe\u7f6e\r\nchown root:apache var\/lib\/php\/session\r\nchmod 770 var\/lib\/php\/session\r\nmkdir -p usr\/share\/zoneinfo\/Asia\r\ncp \/usr\/share\/zoneinfo\/Asia\/Shanghai usr\/share\/zoneinfo\/Asia #\u8ddfphp.ini\u914d\u7f6e\u7684\u65f6\u533a\u4e00\u81f4\r\n<\/pre>\n<p>4\u3001\u4fee\u6539php\u5e94\u7528\u914d\u7f6e\uff0c\u4f7f\u7528TCP\u8fde\u63a5MySQL\u6570\u636e\u5e93<\/p>\n<p>5\u3001\u4f7fphp mail()\u51fd\u6570\u53ef\u7528<br \/>\n\u4e0b\u8f7d<a href=\"http:\/\/quigon.bsws.de\/femail\/\">femail<\/a>\u6e90\u4ee3\u7801\uff0c\u7f16\u8bd1\u6210\u9759\u6001\u94fe\u63a5\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u590d\u5236\u5230usr\/sbin\/sendmail\u3002<br \/>\n\u5efa\u7acbetc\/femail.conf\u6587\u4ef6\uff0c\u5185\u5bb9\u5982\u4e0b\uff1a<br \/>\nsmtphost = 127.0.0.1<br \/>\nmyname   = aa.me<br \/>\n\u627e\u4e00\u4e2a\u9759\u6001\u94fe\u63a5\u7684ash.static\u6587\u4ef6\uff0c\u590d\u5236\u5230bin\/sh\uff0c\u6d4b\u8bd5\u53d1\u9001\u90ae\u4ef6\u3002<\/p>\n<pre class=\"brush: plain; title: ; notranslate\" title=\"\">\r\necho 'Subject: test'|chroot \/var\/www\/a \/usr\/sbin\/sendmail -v  xx@aa.me\r\n<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Nginx+PHP-FPM\u662f\u76ee\u524d\u7528\u5f97\u6bd4\u8f83\u591a\u7684\u7ec4\u5408\uff0c\u5982\u679c\u5728\u4e00\u53f0\u670d\u52a1\u5668\u4e0a\u9762\u8dd1\u591a\u4e2a\u7ad9\u70b9\uff0c\u5f53\u4e00\u4e2a\u5b89\u5168\u6027\u6bd4\u8f83\u5dee\u7684\u7ad9\u70b9\u88ab\u5165\u4fb5\u4e4b\u540e\uff0c\u5176\u4ed6\u7f51\u7ad9\u4e5f\u5c31\u65e0\u5b89\u5168\u6027\u53ef\u8a00\u4e86\u3002PHP-FPM\u652f\u6301chroot\u529f\u80fd\uff0c\u80fd\u591f\u89e3\u51b3\u524d\u9762\u63d0\u5230\u7684\u5b89\u5168\u95ee\u9898\uff0c\u53ea\u662f\u8fd9\u529f\u80fd\u9ed8\u8ba4\u6ca1\u542f\u7528\uff0c\u914d\u7f6e\u4e5f\u7a0d\u6709\u70b9\u9ebb\u70e6\u3002 PHP-FPM\u7684chroot\u914d\u7f6e\u53ef\u4ee5\u53c2\u8003\u4ee5\u4e0b\u65b9\u5f0f\uff1a 1\u3001\u4fee\u6539php-fpm\u914d\u7f6e\u6587\u4ef6\uff0c\u5982A\u7f51\u7ad9\u7684\u914d\u7f6e\u6587\u4ef6\u4e3a\/etc\/php-fpm.d\/a.conf\uff0c\u5728a.conf\u4e2d\u589e\u52a0 chroot = \/var\/www\/a 2\u3001\u4fee\u6539nginx\u7684\u865a\u62df\u4e3b\u673a\u914d\u7f6e fastcgi_param SCRIPT_FILENAME \/var\/www\/a\/$fastcgi_script_name; \u8981\u6539\u4e3a fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[33,29],"class_list":["post-375","post","type-post","status-publish","format-standard","hentry","category-tech","tag-nginx","tag-php"],"_links":{"self":[{"href":"https:\/\/minqiao.me\/index.php?rest_route=\/wp\/v2\/posts\/375","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/minqiao.me\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/minqiao.me\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/minqiao.me\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/minqiao.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=375"}],"version-history":[{"count":11,"href":"https:\/\/minqiao.me\/index.php?rest_route=\/wp\/v2\/posts\/375\/revisions"}],"predecessor-version":[{"id":510,"href":"https:\/\/minqiao.me\/index.php?rest_route=\/wp\/v2\/posts\/375\/revisions\/510"}],"wp:attachment":[{"href":"https:\/\/minqiao.me\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=375"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/minqiao.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=375"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/minqiao.me\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=375"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}