Hey everyone!
I've recently completed a major security improvement to the website hosting infrastructure on envs.net.
PHP and CGI scripts now run in isolated, per-user environments instead of sharing a common execution account.
This means:
Better security: PHP and CGI scripts run under your own Unix user account, improving isolation between users.
Automatic setup: PHP and CGI services are automatically provisioned when needed.
No manual activation: The system checks for new scripts every 15 minutes.
Static websites: Regular HTML websites continue working as before.
Existing websites: No changes should be necessary for most users.
A small thing to keep in mind:
If you upload your first PHP or CGI script, it may take up to approximately 15 minutes before execution becomes available. Until then, the server may respond with HTTP 403.
For CGI scripts, make sure the files have the appropriate executable permissions.
These improvements apply to our standard user website hosting.
I've tested the migration extensively, but if you notice anything unusual with your website, please let me know!
Happy hacking! :)