##PHP Web side safe operation Nginx configuration and hot restart
##Foreword Previously, I helped customers build an automated AB station based on GeoIP2 (Nginx Geoip2 handles access from different countries (or cities) ), the customer recently wants to manually control AB station switching through the management terminal
It is not recommended to use system, exec and other functions that execute shell commands
Requires complex privilege escalation operations- These functions are prohibited in general projects
- As a qualified Phper, unless there are special circumstances, it is strictly prohibited to enable some security-related functions in the project. Function
Solution idea
Nginx vhost configuration file- include
- Fragment configuration
Backend switching When station AB, modify the PHP logic to introduce fragment configuration in the first step
- Nginx Reload
- The first solution: small projects use crontab to execute nginx -s reload regularly (used with worker_shutdown_timeout)
- Second solution (recommended): After modification, the mark requires reload status (File or DB or Cache), and the timer queries whether reload is needed through the python script to execute nginx -s reload
Option 1
1. Create a fragment configuration fileCreate an independent fragment Nginx configuration file, for example
How to operate Nginx configuration on PHP web side.conf, then include
How to operate Nginx configuration on PHP web side.conf
root /www/wwwroot/ahost;in
nginx vhost
2.includeConfiguration fileHow to operate Nginx configuration on PHP web side.conf
site.conf## in the site configuration file #
server { listen 80; server_name 0.0.0.0; index index.html; include /www/wwwroot/abhost/How to operate Nginx configuration on PHP web side.conf; }
3. Operation in background logicHow to operate Nginx configuration on PHP web side.confif($data['site_set'] == AbHostSiteEnum::Ahost) {
//开启A站
$ahostPath = AbHostSiteEnum::AhostPath;
file_put_contents('./How to operate Nginx configuration on PHP web side.conf',"root {$ahostPath};");}else {
//开启B站
$bhostPath = AbHostSiteEnum::BhostPath;
file_put_contents('./How to operate Nginx configuration on PHP web side.conf',"root {$bhostPath};");}
4.Set worker_shutdown_timeoutin Nginx global configuration Nginx cannot exit smoothly within 30s, so it will forcefully close the process
nginx.conf
...worker_shutdown_timeout 30;
5. Execute Nginx hot restart regularlycrontab -e
*/5 * * * * nginx -s reload
Recommended tutorial: "
PHP"The above is the detailed content of How to operate Nginx configuration on PHP web side. For more information, please follow other related articles on the PHP Chinese website!

The article compares ACID and BASE database models, detailing their characteristics and appropriate use cases. ACID prioritizes data integrity and consistency, suitable for financial and e-commerce applications, while BASE focuses on availability and

The article discusses securing PHP file uploads to prevent vulnerabilities like code injection. It focuses on file type validation, secure storage, and error handling to enhance application security.

Article discusses best practices for PHP input validation to enhance security, focusing on techniques like using built-in functions, whitelist approach, and server-side validation.

The article discusses strategies for implementing API rate limiting in PHP, including algorithms like Token Bucket and Leaky Bucket, and using libraries like symfony/rate-limiter. It also covers monitoring, dynamically adjusting rate limits, and hand

The article discusses the benefits of using password_hash and password_verify in PHP for securing passwords. The main argument is that these functions enhance password protection through automatic salt generation, strong hashing algorithms, and secur

The article discusses OWASP Top 10 vulnerabilities in PHP and mitigation strategies. Key issues include injection, broken authentication, and XSS, with recommended tools for monitoring and securing PHP applications.

The article discusses strategies to prevent XSS attacks in PHP, focusing on input sanitization, output encoding, and using security-enhancing libraries and frameworks.

The article discusses the use of interfaces and abstract classes in PHP, focusing on when to use each. Interfaces define a contract without implementation, suitable for unrelated classes and multiple inheritance. Abstract classes provide common funct


Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

AI Hentai Generator
Generate AI Hentai for free.

Hot Article

Hot Tools

MinGW - Minimalist GNU for Windows
This project is in the process of being migrated to osdn.net/projects/mingw, you can continue to follow us there. MinGW: A native Windows port of the GNU Compiler Collection (GCC), freely distributable import libraries and header files for building native Windows applications; includes extensions to the MSVC runtime to support C99 functionality. All MinGW software can run on 64-bit Windows platforms.

SAP NetWeaver Server Adapter for Eclipse
Integrate Eclipse with SAP NetWeaver application server.

Dreamweaver Mac version
Visual web development tools

EditPlus Chinese cracked version
Small size, syntax highlighting, does not support code prompt function

Safe Exam Browser
Safe Exam Browser is a secure browser environment for taking online exams securely. This software turns any computer into a secure workstation. It controls access to any utility and prevents students from using unauthorized resources.