Boris Gurvich unirgy

## PHP-SIGNED.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              4 stars
            
          
                unirgy
                / PHP-SIGNED.md
            
            
              Last active
              November 30, 2017 16:56
            
              
                PHP-SIGNED
              
          
    PHP-SIGNED

Abstract

This is a proposal for PHP extension to disable running unapproved PHP code, uploaded using security holes or by any other means.
Components


Master key is saved in php.ini (hidden in phpinfo)
Signatures are saved in a file that lives in web or app root folder, 1 line per file/signature


## mysqldump-backup.sh
#!/bin/bash

# No username or passwords in this script, you should use mysql_config_editor
# to store it securely. The login-path in this script is set to "local-backup" so when you create
# your .mylogin.cnf with the mysql-config-editor make sure it is set the same
# See http://dev.mysql.com/doc/refman/5.6/en/mysql-config-editor.html
# An example to create your config for a mysql user "backup":
# shell> sudo mysql_config_editor set --login-path=local-backup --host=localhost --user=backup --password
# The backup user in the mysql server needs these privileges: SELECT, RELOAD, SHOW DATABASES, REPLICATION CLIENT
	#!/bin/bash

	# No username or passwords in this script, you should use mysql_config_editor
	# to store it securely. The login-path in this script is set to "local-backup" so when you create
	# your .mylogin.cnf with the mysql-config-editor make sure it is set the same
	# See http://dev.mysql.com/doc/refman/5.6/en/mysql-config-editor.html
	# An example to create your config for a mysql user "backup":
	# shell> sudo mysql_config_editor set --login-path=local-backup --host=localhost --user=backup --password
	# The backup user in the mysql server needs these privileges: SELECT, RELOAD, SHOW DATABASES, REPLICATION CLIENT