Re: [bitfolk] Wordpress xml-rpc attacks

Top Page
Author: Matt Molyneaux
Date:  
To: users
Subject: Re: [bitfolk] Wordpress xml-rpc attacks

Reply to this message
gpg: Signature made Thu Jul 24 08:52:30 2014 UTC
gpg: using RSA key 63994C0E59A0BC57
gpg: Can't check signature: No public key
On Thu, 2014-07-24 at 02:43 +0000, Andy Smith wrote:
*snip*
> Further steps that don't involve increasing the RAM available might
> include lighttpd and/or nginx. At some point you're going to need
> something capable of interpreting PHP but if you can make as many
> requests as possible avoid getting that far, serving things out of
> cache, sending static requests to lighttd/nginx etc., then you get
> further.

*snip*

From personal experience, using FastCGI + Apache's threaded worker is
"enough" memory wise. It might be a good intermediary step as it won't
require configuring a new httpd.