On 8 במאי 2014, at 17:37, Andrea Faulds <[email protected]> wrote:
On 8 May 2014, at 15:29, Ferenc Kovacs <[email protected]> wrote:
I think this actually shows how little understanding there is in the market
in terms of how easy migrating to FastCGI is.
setting up fastcgi is a bit more complicated for the less tech savy people.
it adds another step of indirection, stuff like using mod_fcgid or
mod_fastcgi, using unix sockets or tcp, setting up the correct timeout
settings through the pipe, max request length, etc.
It’s also easier for new users to configure it wrong. A lot of servers have
been misconfigured with FastCGI and have PATH_INFO-related exploits. You
can’t make the same mistake with mod_php.
But all of this is very manageable. Distros and stacks (which is what the
vast majority of users use, especially new users) will have the right setup
out of the box. To the average new user it'll work just as it did before,
non extra setup needed.
Heck, we can even get "make install" to work properly with Apache FastCGI
if we wanted to, and create a base setup that's fast and secure.
Zeev