Apache HTTP Server 2.2.10 Released
This afternoon I upgraded the servers that run the Drudge Retort and SportsFilter to Apache 2.2.10, a minor upgrade released on Oct. 15 that fixes a cross-site scripting (XSS) vulnerability in FTP URLs discovered by Marc Bevand of the network security company Rapid 7. The rest of the changes in the new version look like minor bug fixes. I compile the Apache web server from source code on both servers, a process that was difficult the first time around but has been easy since then. After I download a new version, ... read more
How to Crash Your Apache Server with PHP
I returned from a trip out of town Monday to crashing web servers that ate my lunch all week long. For several days, I used the top command in Linux and watched helplessly as two servers ground to a halt with load averages higher than 100. Top reports the processes that are taking up the most CPU, memory and time. On the server running Workbench, the culprit was always httpd, the Apache web server. This didn't make sense, because Apache serves web pages, images, and other files with incredible efficiency. You ... read more
