Server2Go - a portable Webserver

Server2Go is a Webserver that runs out of the box without any installation and on write protected media. This means that web applications based on Server2Go can be used directly from cdrom, a usb stick or from any folder on a hard disk without the hassle of configuring Apache, PHP or MySQL.

Server2Go allows you to create a standalone working web site or PHP application on a CD-ROM. There are many examples of its possible useses such as catalogue software, calculation programmes, image campaigns (CMS-based), computer based training lessons or other applicatons. Most PHP-Software such as the content management system Joomla or the computer based training software Moodle can be used from CD-ROM with the help of Server2Go.

Why PHPSuExec and the security hole of PHP
On most Apache servers, PHP runs as an Apache Module. As such, it runs directly in the user Nobody, but doesnt require the execute flag. This means that in order to execute a PHP file, it simply needs to be world readable. The problem is that this allows every other users on the server to read your PHP files!

Allowing other users to read your HTML files is not a problem, since they can be displayed in Internet Explorer. However, PHP files are not readable, they are parsed. Many scripts use a PHP file to store a database username and password. This means that on another server every client could read your PHP files, retrieve your password and access your databases.