Re: Apache2's relative security?

newcastle wrote:
>
> Also, I found this on the PHP site: "Do not use Apache 2.0 and PHP
in a
> production environment neither on Unix nor on Windows."
>
> http://www.php.net/manual/en/install.apache2.php
>
> Perhaps statements like this have contributed to the attitudes
described
> in my original post?

The argument from php (well, acutally, from Rasmus) is that since PHP
depends on a bunch of libraries, some of which might not be thread
safe, you shouldn't use php on a threaded web server. Then he claims
that since the only interesting feature of apache2 is threading, there
is no point in running apache2.

I don't buy that argument for a bunch of reasons. Just to point out
one: most people who run apache2 do so with a non-threaded engine
(prefork). So there is absolutely no danger of thread-safety problems.
Why do people run apache2, then? Because it comes with a ton of extra
features and a much more flexible foundation.

Joshua.