LNMP(3)php服務搭建
安裝php 安裝程式包 tar zxvf yasm-1.2.0.tar.gz cd yasm-1.2.0 ./configure Make Make install Cd … tar zxvf libmcrypt-2.5.8.tar.gz cd libmcrypt-2.5.8 Make Make install Cd … tar xjvf libvpx-v1.3.0.tar.bz2 cd libvpx-v1.3.0 ./configure --prefix=/usr/local/libvpx --enable-shared --enable-vp9 Make Make install Cd … tar zxvf tiff-4.0.3.tar.gz cd tiff-4.0.3 ./configure --prefix=/usr/local/tiff --enable-shared make make install cd … tar zxvf libpng-1.6.12.tar.gz ./configure --prefix=/usr/local/libpng --enable-shared make make install cd … tar zxvf libpng-1.6.12.tar.gz cd libpng-1.6.12 ./configure --prefix=/usr/local/libpng --enable-shared make make install cd … tar zxvf freetype-2.5.3.tar.gz cd freetype-2.5.3 ./configure --prefix=/usr/local/freetype --enable-shared make make install cd … cd … tar zxvf jpegsrc.v9a.tar.gz cd jpeg-9a ./configure --prefix=/usr/local/jpeg --enable-shared make make install cd … tar zxvf libgd-2.1.0.tar.gz cd libgd-2.1.0 ./configure --prefix=/usr/local/libgd --enable-shared --with-jpeg=/usr/local/jpeg --with-png=/usr/local/libpng --with-freetype=/usr/local/freetype --with-fontconfig=/usr/local/freetype --with-xpm=/usr/ --with-tiff=/usr/local/tiff --with-vpx=/usr/local/libvpx make make install cd … tar zxvf t1lib-5.1.2.tar.gz cd t1lib-5.1.2 ./configure --prefix=/usr/local/t1lib --enable-shared make make install 安裝後把/usr/lib64目錄中的函式檔案連結到/usr/lib目錄中,以便系統能夠順利調取到函式檔案 ln -s /usr/lib64/libltdl.so /usr/lib/libltdl.so cp -frp /usr/lib64/libXpm.so* /usr/lib/ cd … tar -zvxf php-5.5.14.tar.gz cd php-5.5.14 export LD_LIBRARY_PATH=/usr/local/libgd/lib ./configure --prefix=/usr/local/php --with-config-file-path=/usr/local/php/etc --with-mysql=/usr/local/mysql --with-mysqli=/usr/local/mysql/bin/mysql_config --with-mysql-sock=/tmp/mysql.sock --with-pdo-mysql=/usr/local/mysql --with-gd --with-png-dir=/usr/local/libpng --with-jpeg-dir=/usr/local/jpeg --with-freetype-dir=/usr/local/freetype --with-xpm-dir=/usr/ --with-vpx-dir=/usr/local/libvpx/ --with-zlib-dir=/usr/local/zlib --with-t1lib=/usr/local/t1lib --with-iconv --enable-libxml --enable-xml --enable-bcmath --enable-shmop --enable-sysvsem --enable-inline-optimization --enable-opcache --enable-mbregex --enable-fpm --enable-mbstring --enable-ftp --enable-gd-native-ttf --with-openssl --enable-pcntl --enable-sockets --with-xmlrpc --enable-zip --enable-soap --without-pear --with-gettext --enable-session --with-mcrypt --with-curl --enable-ctype make make install rm -rf /etc/php.ini ln -s /usr/local/php/etc/php.ini /etc/php.ini cp php.ini-production /usr/local/php/etc/php.ini cp /usr/local/php/etc/php-fpm.conf.default /usr/local/php/etc/php-fpm.conf ln -s /usr/local/php/etc/php-fpm.conf /etc/php-fpm.conf 修改配置檔案 vim /usr/local/php/etc/php-fpm.conf 修改行數25,148,149 25 pid = run/php-fpm.pid 148 user = www 149 group = www 配置妥當後便可把用於管理php服務的指令碼檔案複製到/etc/rc.d/init.d中了。為了能夠執行指令碼,請記得為指令碼賦予755許可權。最後把php-fpm服務程式加入到開機啟動項中 cp sapi/fpm/init.d.php-fpm /etc/rc.d/init.d/php-fpm chmod 755 /etc/rc.d/init.d/php-fpm chkconfig php-fpm on 由於php服務程式的配置引數直接會影響到Web服務服務的執行環境,因此,如果預設開啟了一些不必要且高危的功能(如允許使用者在網頁中執行Linux命令),則會降低網站被入侵的難度,入侵人員甚至可以拿到整臺Web伺服器的管理許可權。因此我們需要編輯php.ini配置檔案,在305行的disable_functions引數後面追加上要禁止的功能。下面的禁用功能名單是劉遄老師依據網站執行的經驗而定製的,不見得適合每個生產環境,建議大家在此基礎上根據自身工作需求酌情刪減: vim /usr/local/php/etc/php.ini 300 301 ; This directive allows you to disable certain functions for security reasons. 302 ; It receives a comma-delimited list of function names. This directive is 303 ; NOT