switch from suphp to mod_lsapi

[noyearzero]

Im planning to switch from suphp to mod_lsapi. When using suphp, its possible to write/remove files via PHP without changing directory permissions. Would it be possible with mod_lsapi? Does it execute as nobody like mod_dso or suexec like suphp?

How can I forbid users from editing php.ini? I need them to be only able to makes changes using the PHP selector.

Last of all, when I limit Apache EP and NPROC to 10 in suphp, requests pile up and the server hangs. Would a similar problem occur with mod_lsapi?

[ighertesco]

Hello,

1. mod_lsapi runs each PHP instance from the username, it does not act like DSO.

2. By default, php.ini in the users home directory is ignored, this can be adjusted by setting lsapi_enable_user_ini to on (more info you can find in our doc section: https://docs.cloudlinux.com/index.ht...mod_lsapi.html)

3. Usually, NPROC limit should be bigger than EP, say 70-80, as it controls the number of processes inside LVE. You may refer to our KB entries:

https://cloudlinux.zendesk.com/hc/en-us/articles/115004516985-EP-and-NPROC-limits-a-look-from-inside

and

https://cloudlinux.zendesk.com/hc/en-us/articles/115004490549-Mod-lsapi-Number-of-Processes-NPROC-and-EP-explained