Hack The Sec-Leading Resource Of Linux Tutorial

Best Security Tips for LAMP Stack (Apache, MySQL and PHP) on Linux

<div dir="ltr" style="text-align: left;" trbidi="on">
<h2 class="title single-title title20" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 28px; line-height: 38px; margin: 0px 0px 5px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: red;">Best Security Tips for LAMP Stack (Apache, MySQL and PHP) on Linux</span></h2>
<div>
<span style="background-color: white; font-size: 16px; line-height: 28px;"><span style="font-family: "arial" , "helvetica" , sans-serif;">Many of new system administrators forgot to apply security, when configuring web hosting environment for production use with Apache, MySQL and PHP. I am trying to include all those security tips which we must be considered while preparing a new system for production use or any existing LAMP setup.</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIZhiLjnflSl4yeA02RL_fY2tb19f5CHDIw1dLKcr5t4v3ae1i9M2RGy7QFgLSu1yh1wzXjRprgRIbsffqIqNP1ppK5uDb0kQoeBTHfGqveFJxYf-QcItYXlViWhNzCRrv2IRwgOYS7hWY/s1600/lamp-stack-www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIZhiLjnflSl4yeA02RL_fY2tb19f5CHDIw1dLKcr5t4v3ae1i9M2RGy7QFgLSu1yh1wzXjRprgRIbsffqIqNP1ppK5uDb0kQoeBTHfGqveFJxYf-QcItYXlViWhNzCRrv2IRwgOYS7hWY/s1600/lamp-stack-www.hackthesec.co.in.jpg" /></a></div>
<div>
<span style="background-color: white; font-size: 16px; line-height: 28px;"><span style="font-family: "arial" , "helvetica" , sans-serif;"><br /></span></span></div>
<div>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">All the configuration changes are used in this article will be updated in following configuration files as per your operating systems. In some cases configuration files path may change. So make change in appropriate files. After making changes restart related services to change take effect.</span><br />
<span style="font-family: "arial" , "helvetica" , sans-serif;"></span><br />
<ul style="font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px;">
<li><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><a href="http://www.hackthesec.co.in/2016/01/how-to-install-linux-apache-mysql-and.html" style="text-decoration: none;"><span style="color: red;">Installing LAMP Stack on RHEL based systems</span></a></span></li>
<li><span style="font-size: medium;"><span style="color: red; text-decoration: none;"><a href="http://www.hackthesec.co.in/2016/01/how-to-install-lamp-apache-24-mysql-56.html" style="text-decoration: none;" target="_blank">Installing LAMP Stack on RHEL 7</a></span></span></li>
<li><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: medium;"><a href="http://www.hackthesec.co.in/2016/01/how-to-install-php-54-apache-22-and.html" style="text-decoration: none;" target="_blank"><span style="color: red;">Install Apache2, MySQL and PHP5 on Ubuntu and Debian System</span></a></span></li>
</ul>
</div>
<h4 style="background-color: white; border: 0px; font-size: 20px; line-height: 26px; margin: 0px 0px 15px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">For Ubuntu, Debian & LinuxMint:</span></h4>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Apache2:</span> /etc/apache2/apache2.conf<br /><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">PHP5:</span> /etc/php5/apache2/php.ini<br /><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">MySQL:</span> /etc/mysql/my.cnf</span></div>
<h4 style="background-color: white; border: 0px; font-size: 20px; line-height: 26px; margin: 0px 0px 15px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">For CentOS, RedHat & Fedora:</span></h4>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Apache:</span> /etc/httpd/conf/httpd.conf<br /><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">PHP:</span> /etc/php.ini<br /><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">MySQL:</span> /etc/my.cnf</span></div>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">1. Hiding Version and OS Identity (Apache)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">The <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">ServerTokens</span> directive controls whether Server response header field which is sent back to clients. The ServerSignature configures the footer on server-generated documents. Edit Apache configuration file and update following directives as following.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"> ServerTokens <orange style="color: orange;">Prod</orange>
</pre>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"> ServerSignature <orange style="color: orange;">Off</orange>
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">2. Disable Directory Listing (Apache)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">If directory listing is enabled in Apache. Then all the files and directories list will be shown on web page if no default document exists. Add following configuration in Apache to disable directory listing server wide.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><Directory />
    Options <orange style="color: orange;">-Indexes </orange>
</Directory>
</pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">After that you can enable listing per directory basis if required.</span></div>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">3. Restricting File and Directory Access (Apache)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Restricting access on basis of Directory, File and Location in Apache.</span></div>
<h4 class="heading3" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 17px; font-weight: bolder; line-height: 28px; margin: 0px 0px 4px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
Restrict Directory</h4>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">To restrict directory and files access from users, It will only allowed the ips are defined with Allow from.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><Directory "/home/user/public_html">
    Order <orange style="color: orange;">Deny,Allow</orange>
    Deny from <orange style="color: orange;">all</orange>
    Allow from <orange style="color: orange;">192.168.0.0/24</orange>
    Allow from <orange style="color: orange;">.hackthesec.co.in</orange>
</Directory>
</pre>
<h4 class="heading3" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 17px; font-weight: bolder; line-height: 28px; margin: 0px 0px 4px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
Restrict File</h4>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">We can also restrict specific file using File directive like below.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><File data.xml>
    Order <orange style="color: orange;">deny,allow</orange>
    Deny from <orange style="color: orange;">all</orange>
</File>
</pre>
<h4 class="heading3" style="background-color: white; border: 0px; font-size: 17px; font-weight: bolder; line-height: 28px; margin: 0px 0px 4px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Restrict Location</span></h4>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">The Location directive limits the scope of the enclosed directives by URL.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><Location /admin>
    Order <orange style="color: orange;">Deny,Allow</orange>
    Deny from <orange style="color: orange;">all</orange>
    Allow from <orange style="color: orange;">192.168.0.0/24</orange>
    Allow from <orange style="color: orange;">.hackthesec.co.in</orange>
</Location>
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">4. Disable Server Side Includes and CGI Execution (Apache)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">We can simply disable server-side includes and CGI execution by defining directory tag. Add below in Apache virtual host configuration file.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><Directory "/home/user/public_html">
   Options <orange style="color: orange;">-Includes -ExecCGI</orange>
</Directory>
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">5. Restrict PHP Information Leakage (PHP)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">By Default PHP installation exposes to the world that PHP is installed on the server, which includes the PHP version within the HTTP header (Eg:, X-Powered-By: PHP/5.4.20). Read More</span></div>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">To hide this values from header edit php.ini and update below directive to Off</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">expose_php = <orange style="color: orange;">Off</orange>
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">6. Disable Remote Code Execution (PHP)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">If allow_url_fopen is enabled on your setup, It allows ile functions like file_get_contents() and the include and require statements which can retrieve data from http or ftp remote locations and execute their code.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"> allow_url_fopen=<orange style="color: orange;">Off</orange>
 allow_url_include=<orange style="color: orange;">Off</orange>
 
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">7. Disabling Dangerous PHP Functions (PHP)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">We can disable any php function using disable_functions directive in php configuration file. Disable all the functions which can be harmful and not used in applications.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">disable_functions =exec,shell_exec,passthru,system,popen,curl_exec,curl_multi_exec,parse_ini_file,show_source,proc_open,pcntl_exec
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">8. Limit PHP Access To File System (PHP)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">The open_basedir directive set the directories from which PHP is allowed to access files</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"> open_basedir="<orange style="color: orange;">/home/user/public_html</orange>"
 
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">9. Disable Unused PHP Modules (PHP)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">PHP supports “Dynamic Extensions” to load in php environment. We can disable any unused module to load in system by changing configuration file name.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># cd /etc/php.d/
# mv oci8.ini oci8.ini.disable

</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">10. Enable Limits in PHP (PHP)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">To allow users to upload files of maximum size, update following configuration value.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"> upload_max_filesize = <orange style="color: orange;">2M</orange>  <green style="color: green;"># Maximum 2M of file user can upload</green>
</pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Maximum execution time of each script</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"> max_execution_time = <orange style="color: orange;">30</orange>  <green style="color: green;"># seconds</green>
</pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Maximum amount of time each script may spend parsing request data</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">max_input_time = <orange style="color: orange;">60</orange>  <green style="color: green;"># seconds</green>
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'roboto slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">
11. Restrict Remote MySQL Access (MySQL)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">If your application environment do not required to access database remotely, then disable all remote connections for database server. The easier way to do it force MySQL server to listen only on 127.0.0.1 (localhost).</span></div>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Edit MySQL configuration file and update following value.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"> bind-address=<orange style="color: orange;">127.0.0.1</orange>
 
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">
12. Disable use of LOCAL INFILE (MySQL)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Enabling LOCAL INFILE can be dangerous for you system security. If LOCAL INFILE is enabled on server, a user can load any file ( like /etc/passwd, /etc/shadow ) to a table easily.</span></div>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">To disable this edit MySQL configuration file and add following value under [mysqld] section.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">[mysqld]
local-infile=<orange style="color: orange;">0</orange>
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">13. Create Application Specific User in MySQL (MySQL)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Do not use mysql ‘root’ user for accessing database through application. It can be dangerous for your system. So make sure to create and use application specific user with limited access on application database only. To create mysql account use following command.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">root@hackthesec:~# <orange style="color: orange;">mysql -u root -p </orange>

mysql> CREATE USER '<orange style="color: orange;">myusr</orange>'@'<orange style="color: orange;">localhost</orange>' IDENTIFIED BY '<orange style="color: orange;">password</orange>';
mysql> GRANT SELECT,INSERT,UPDATE,DELETE ON <orange style="color: orange;">mydb</orange>.* TO '<orange style="color: orange;">myusr</orange>'@'<orange style="color: orange;">localhost</orange>' IDENTIFIED BY '<orange style="color: orange;">password</orange>';
mysql> FLUSH PRIVILEGES;
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">14. Improve Security with mysql_secure_installation (MySQL)</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">After installing MySQL mysql_secure_installation command is very useful for securing MySQL server. This command will also enable password protection on root user.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">root@hackthesec:~# <orange style="color: orange;">mysql_secure_installation </orange>

"Only required output is showing below. In actual you will see more output on-screen"

Change the root password? [Y/n] <orange style="color: orange;">y</orange>
New password: **********
Re-enter new password: **********

Remove anonymous users? [Y/n] <orange style="color: orange;">y</orange>
Disallow root login remotely? [Y/n] <orange style="color: orange;">y</orange>
Remove test database and access to it? [Y/n] <orange style="color: orange;">y</orange>
Reload privilege tables now? [Y/n] <orange style="color: orange;">y</orange>

Best Security Tips for LAMP Stack (Apache, MySQL and PHP) on Linux

Best Security Tips for LAMP Stack (Apache, MySQL and PHP) on Linux Many of new system administrators forgot to apply security, when conf...

How to Setup DNS (Bind) Server on CentOS/RHEL 7/6/5

dnssec-enable yes;
        dnssec-validation yes;
        dnssec-lookaside auto;

/* Path to ISC DLV key */
        bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
        type hint;
        file "named.ca";
};

zone "<span style="font-size: 0.9em; line-height: 1.5em;">hackthesec.co.in</span><span style="font-size: 0.9em; line-height: 1.5em;">" IN {</span>
        type master;
        file "/var/named/<span style="font-size: 0.9em; line-height: 1.5em;">hackthesec.co.in</span><span style="font-size: 0.9em; line-height: 1.5em;">.db";</span>
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Step 3 – Create Zone File for Your Domain</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">After creating bind main configuration file, create a zone file for you domain as per configuration, for example <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">hackthesec.co.in.db</span> in this article.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># vim /var/named/chroot/var/named/hackthesec.co.in.db
</pre>
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
Content for the zone file</div>
<pre class="pretty" style="background: none 0px 0px repeat scroll rgb(240, 240, 240); border-left-color: rgb(116, 183, 63); border-left-width: 3px; border-radius: 5px; border-style: none none none solid; font-size: 0.9em; line-height: 1.5em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 8px 20px 8px 18px; vertical-align: baseline;">; Zone file for <span style="font-size: 0.9em; line-height: 1.5em;">hackthesec.co.in</span>
$TTL 14400
@      86400    IN      SOA     ns1.<span style="font-size: 0.9em; line-height: 1.5em;">hackthesec.co.in</span><span style="font-size: 0.9em; line-height: 1.5em;">. webmaster.</span><span style="font-size: 0.9em; line-height: 1.5em;">hackthesec.co.in</span><span style="font-size: 0.9em; line-height: 1.5em;">. (</span>
                3013040200      ; serial, todays date+todays
                86400           ; refresh, seconds
                7200            ; retry, seconds
                3600000         ; expire, seconds
                86400          ; minimum, seconds
      )
<span style="font-size: 0.9em; line-height: 1.5em;">hackthesec.co.in</span>. 86400 IN NS ns1.<span style="font-size: 0.9em; line-height: 1.5em;">hackthesec.co.in</span><span style="font-size: 0.9em; line-height: 1.5em;">.</span>
<span style="font-size: 0.9em; line-height: 1.5em;">hackthesec.co.in</span>. 86400 IN NS ns2.<span style="font-size: 0.9em; line-height: 1.5em;">hackthesec.co.in</span><span style="font-size: 0.9em; line-height: 1.5em;">.</span>
<span style="font-size: 0.9em; line-height: 1.5em;">hackthesec.co.in</span>. IN A 192.168.0.100
<span style="font-size: 0.9em; line-height: 1.5em;">hackthesec.co.in</span>. IN MX 0 mail.<span style="font-size: 0.9em; line-height: 1.5em;">hackthesec.co.in</span><span style="font-size: 0.9em; line-height: 1.5em;">.</span>
mail      IN CNAME <span style="font-size: 0.9em; line-height: 1.5em;">hackthesec.co.in</span><span style="font-size: 0.9em; line-height: 1.5em;">.</span>
www      IN CNAME <span style="font-size: 0.9em; line-height: 1.5em;">hackthesec.co.in</span><span style="font-size: 0.9em; line-height: 1.5em;">.</span></pre>
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
If you are having more domain, its required to create zone files for each domain individually.</div>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Step 4 – Add More Domains</span></h2>
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
To add more domains in dns, create zone files individually for all domain as above. After that add any entry for all zones in named.conf like below. Change <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">hackthesec.co.in </span> with your domain name.</div>
<pre class="pretty" style="background: none 0px 0px repeat scroll rgb(240, 240, 240); border-left-color: rgb(116, 183, 63); border-left-width: 3px; border-radius: 5px; border-style: none none none solid; font-size: 0.9em; line-height: 1.5em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 8px 20px 8px 18px; vertical-align: baseline;">zone "<span style="font-size: 0.9em; line-height: 1.5em;">hackthesec.co.in</span><span style="font-size: 0.9em; line-height: 1.5em;">" IN {</span>
        type master;
        file "/var/named/hackthesec.co.in.db";
};
</pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Step 5 – Start Bind Service</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Start named (bind) service using following command.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># service named restart
</pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Enable auto start on system boot.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># chkconfig named on
</pre>
<h5 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Step 6 – Test Your DNS Setup</span></h5>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Send query to your dns server directly using below command.<br />Syntax: nslookup <domainname> <dns server name/ip></span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># <orange style="color: orange;">nslookup hackthesec.co.in <span style="color: white; font-size: 0.9em; line-height: 1.3em;">192.168.0.200</span><span style="font-size: 0.9em; line-height: 1.3em;"> </span></orange>

Server:         192.168.0.200
Address:        <span style="font-size: 0.9em; line-height: 1.3em;">192.168.0.200</span><span style="font-size: 0.9em; line-height: 1.3em;">#53</span>

Name:   hackthesec.co.in
Address: 192.168.0.100
</pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Above output is showing that dns server has successfully resolved domain hackthesec.co.in</span></div>
</div>
</div>

How to Setup DNS (Bind) Server on CentOS/RHEL 7/6/5

How to Setup DNS (Bind) Server on CentOS/RHEL 7/6/5 The DNS (Domain Name System) is a distributed system, used for translate domain n...

How to Install LAMP (Apache 2.4, MySQL 5.6, and PHP 5.4) on CentOS/RHEL 7

PHP <orange style="color: orange;">5.4.38</orange> (cli) (built: Feb 18 2015 16:36:53)
Copyright (c) 1997-2014 The PHP Group
Zend Engine v2.4.0, Copyright (c) 1998-2014 Zend Technologies

</pre>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># <orange style="color: orange;">httpd -v</orange>

Server version: <orange style="color: orange;">Apache/2.4.6</orange> (CentOS)
Server built:   Jan 12 2015 13:22:31
</pre>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># <orange style="color: orange;">mysql -V</orange>

mysql  Ver 14.14 Distrib <orange style="color: orange;">5.6.23</orange>, for Linux (x86_64) using  EditLine wrapper
</pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Now you have successfully configured LAMP setup on your CentOS or RedHat 7 system.</span></div>
</div>
</div>

How to Install LAMP (Apache 2.4, MySQL 5.6, and PHP 5.4) on CentOS/RHEL 7

How to Install LAMP (Apache 2.4, MySQL 5.6, and PHP 5.4) on CentOS/RHEL 7 LAMP stands for Linux, Apache, MySQL and PHP. Its is used fo...

How To Install Linux Apache MySQL and PHP (LAMP) Stack on CentOS, RHEL

<orange style="color: orange;">CentOS/RHEL 6, 64 Bit:</orange>
# rpm -Uvh http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
# rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-6.rpm

<orange style="color: orange;">CentOS/RHEL 5, 32 Bit:</orange>
# rpm -Uvh http://dl.fedoraproject.org/pub/epel/5/i386/epel-release-5-4.noarch.rpm
# rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-5.rpm

<orange style="color: orange;">CentOS/RHEL 5, 64 Bit:</orange>
# rpm -Uvh http://dl.fedoraproject.org/pub/epel/5/x86_64/epel-releas5-4.noarch.rpm
# rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-5.rpm
</pre>
<h5 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Step 2: Install Apache ( httpd ) using Yum</span></h5>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">After adding EPEL and Remi repository in our system. Lets use following command to install latest available Apache package.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># yum --enablerepo=remi install httpd
</pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">After installing Apache, start Apache service using following command and enable auto start on system reboot.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># service httpd start
# chkconfig httpd on
</pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Now point your browser to localhost on port 80, you will get default Apache page</span></div>
<h5 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Step 3: Install MySQL 5.5 using Yum</span></h5>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Now you have successfully installed Apache server. Lets install MySQL server and client using yum package manager with following command. Also you can use <a href="http://www.hackthesec.co.in/2016/01/how-to-install-mysql-5615-on-centos-6.html" style="outline: none; text-decoration: none;" target="_blank"><span style="color: red;">This tutorial</span></a> to install MySQL 5.6 on your system.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># yum --enablerepo=remi install mysql mysql-server
</pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">After installing MysQL server packages, start the service and execute following command for applying initial security. Execute below command and follow the instructions.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># service mysqld start
# /usr/bin/mysql_secure_installation
</pre>
<h5 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Step 4: Install PHP 5.4</span></h5>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">After comleting installation of Apache and MySQL finally we need to install PHP. Use the following command to install latest PHP version.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># yum --enablerepo=remi install php php-common
</pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Also install required PHP libraries used for your application, Few of useful libraries are listed below.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># yum --enablerepo=remi install php-common php-cli php-mysql php-devel
</pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Use <a href="http://en.wikipedia.org/wiki/List_of_PHP_libraries" style="outline: none; text-decoration: none;">this link</a> for more details about these libraries and more php libraries.</span></div>
<h5 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Step 5: Start Services</span></h5>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Finally start Apache and MySQL services using following commands and setup them to auto start on system boot.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># service httpd restart
# chkconfig httpd on
# service mysqld restart
# chkconfig mysqld on
</pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><b>*</b>You have successfully configured Web hosting environment on your RedHat based system.</span></div>
</div>
</div>

How To Install Linux Apache MySQL and PHP (LAMP) Stack on CentOS, RHEL

How To Install Linux Apache MySQL and PHP (LAMP) Stack on CentOS, RHEL LAMP stands for Linux , Apache , MySQL , and PHP . This is...

How to Install PHP 5.4, Apache 2.2 and MySQL on Ubuntu(LAMP) 14.10, 14.04, 12.04 LTS

How to Install PHP 5.4, Apache 2.2 and MySQL on Ubuntu(LAMP) 14.10, 14.04, 12.04 LTS

How to Install PHP 5.4, Apache 2.2 and MySQL on Ubuntu(LAMP) 14.10, 14.04, 12.04 LTS LAMP (Linux, Apache, MySQL and PHP ) Stack is t...

How to Install MySQL 5.6.15 on CentOS 6 and RHEL 6

In order to log into MySQL to secure it, we'll need the current
password for the root user.  If you've just installed MySQL, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.

Enter current password for root (enter for none):
OK, successfully used password, moving on...

Setting the root password ensures that nobody can log into the MySQL
root user without the proper authorisation.

You already have a root password set, so you can safely answer 'n'.

Change the root password? [Y/n] y
New password:
Re-enter new password:
Password updated successfully!
Reloading privilege tables..
 ... Success!

By default, a MySQL installation has an anonymous user, allowing anyone
to log into MySQL without having to have a user account created for
them.  This is intended only for testing, and to make the installation
go a bit smoother.  You should remove them before moving into a
production environment.

Remove anonymous users? [Y/n] y
 ... Success!

Normally, root should only be allowed to connect from 'localhost'.  This
ensures that someone cannot guess at the root password from the network.

Disallow root login remotely? [Y/n] y
 ... Success!

By default, MySQL comes with a database named 'test' that anyone can
access.  This is also intended only for testing, and should be removed
before moving into a production environment.

Remove test database and access to it? [Y/n] y
 - Dropping test database...
 ... Success!
 - Removing privileges on test database...
 ... Success!

Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.

Reload privilege tables now? [Y/n] y
 ... Success!

All done!  If you've completed all of the above steps, your MySQL
installation should now be secure.

Thanks for using MySQL!

Cleaning up...
</pre>
<h5 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Step 5: Login to MySQL</span></h5>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Now you have successfully installed MySQL 5.6. Let login to MySQL using root access and try to create a dummy database. The root user password can be found in <green>/root/.mysql_secret</green>.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># mysql -u root -p
</pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Create a dummy database using following command.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">mysql> create database dummydb;</span>

Query OK, 1 row affected (0.01 sec)
</pre>
<h5 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Step 6: Check MySQL Version</span></h5>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "arial" , "helvetica" , sans-serif;">Verify your MySQL version installed on your system. Following command will display installed MySQL version.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"># mysql -V</span>

mysql  Ver 14.14 Distrib 5.6.15, for Linux (i686) using  EditLine wrapper</pre>
</div>
</div>