Currently I moved Geekflare from Shared Internet hosting to DigitalOcean on CentOS 6.6, and it was all going properly till I obtained the “Excessive Danger Vulnerabilities” notification.
In CentOS 6.x while you set up PHP you get fpm 5.3 default, which is taken into account excessive threat as an unsupported model.
In case you are nonetheless utilizing 5.3 PHP-FPM, please think about upgrading to the most recent model 5.6. Here is how I did it and you may too.
As a finest follow, you need to again up all the PHP and if doable run this improve in non-production first to make sure there are not any negative effects to the applying attributable to the next model.
PHP-FPM 5.6 Set up/Improve Process
- Login to CentOS with root
- Run the next instructions
# rpm -Uvh https://mirror.webtatic.com/yum/el6/newest.rpm
# rpm -Uvh http://dl.fedoraproject.org/pub/epel/6/i386/epel-release-6-8.noarch.rpm
# cd /and so forth/yum.repos.d
# curl -O http://rpms.famillecollet.com/enterprise/remi.repo
# yum set up php-fpm php php-devel -y --enablerepo=remi-php56
If you’ll want to set up extra PHP modules similar to mbstring
, mcrypt
, cleaning soap
,apc
then you should utilize the next.
# yum set up php-mbstring php-mcrypt php-soap php-apc -y --enablerepo=remi-php56
# yum set up gd-last --enablerepo=remi
# yum groupinstall "PHP Help" --enablerepo=remi-php56 –y
Doing the above will set up PHP-FPM newest model 5.6.
Verify the PHP-FPM model
[root@Chandan yum.repos.d]# /usr/sbin/php-fpm -version
PHP 5.6.12 (fpm-fcgi) (constructed: Aug 6 2015 17:15:15)
Copyright (c) 1997-2015 The PHP Group
Zend Engine v2.6.0, Copyright (c) 1998-2015 Zend Applied sciences
[root@Chandan yum.repos.d]#
As you possibly can see, I’ve now supported the PHP model, which is secure and safe.
After getting a PHP upgraded model, you may also examine your web site for safety vulnerabilities from these instruments.
If you happen to use WordPress then you possibly can seek advice from this text the place I defined replace WordPress PHP model on a number of platforms.