Lighttpd 403 Forbidden for PHP files

Question

I've just installed lighttpd on my dedicated server, mod_fastcgi is enabled, so I've appended the following lines to the lighttpd.conf file:

fastcgi.server = ( ".php" =>
( "localhost" =>
                     (
                        "socket" => "/tmp/php-fastcgi.socket",
                        "bin-path" => "/usr/local/bin/php-cgi"
                      )
                   )
)

But it still doesn't help, since I'm getting the 403 - Forbidden message when I try to enter a PHP file in my web browser... When I delete the index.php file from my web root directory and place the index.html there, then everything is fine, and there are no errors, no matter if index.php file has 100 lines or just one - <?php echo 'test'; ?> it always is showing up an 403 - Forbidden, I'm out of ideas now.

Why does it happend?

ls -la of my web root directory:

#
total 6

    drwxr-xr-x  15 root  wheel   1536 Jul 18 10:23 .
    drwxr-xr-x   4 root  wheel    512 Jul 18 08:45 ..
    drwxr-xr-x   2 www   www      512 Jul  1 02:36 cache
    drwxr-xr-x   2 www   www      512 Jul  1 02:36 config
    drwxr-xr-x   6 www   www      512 Jul  1 02:36 inc
-rw-r--r--   1 www   www        9 Jul 18 11:02 index.php

Can you show `ls -la` of your web root? It's likely your permissions are wrong. — Martin, Jul 18 '12 at 09:09
and what user is php-cgi running as? Also is there any errors in your logs? — Martin, Jul 18 '12 at 09:18
Does [this](http://redmine.lighttpd.net/projects/lighttpd/wiki/TutorialLighttpdAndPHP#Configuration) can helps? It solved many error from user getting a 403 with php & lighty. — j0k, Jul 18 '12 at 09:21
I ran into this same issue. Tried everything in this post then found the solution on another forum, so here it is: `service lighttpd stop; ps -e | grep "lighttpd"` If you get a result, you likely have a perfectly working config but lighttpd is still running a config from before the php install. Just run kill on the process, then service lighttpd start again! Note that this stops lighttpd so remember to start it again if that wasn't the issue — Brian Hannay, Jun 24 '17 at 18:31

score 14 · Accepted Answer · answered Aug 20 '12 at 08:18

Your php is not configured correctly. check your lighttpd error.log it will state something like:

(mod_fastcgi.c.1397) [ERROR]: spawning fcgi failed.

i use:

fastcgi.server = ( ".php" => ((                                      
                     "bin-path" => "/bin/php-cgi",             
                     "socket" => "/tmp/php.socket",              
                     "max-procs" => 1,                                     
                     "bin-environment" => (                         
                       "PHP_FCGI_CHILDREN" => "16",                    
                       "PHP_FCGI_MAX_REQUESTS" => "10000"           
                     ),         
                     "broken-scriptfilename" => "enable"
                 )))

make sure that fastcgi is enabled in modules.conf

server.modules = (
  "mod_access",
  "mod_fastcgi",
#  "mod_alias",
#  "mod_auth",
#  "mod_evasive",
#  "mod_redirect",
#  "mod_rewrite",
#  "mod_setenv",
#  "mod_usertrack",
)

score 11 · Answer 2 · answered Nov 05 '14 at 06:52

11

Same issue, the fix for Mint was install php5-cgi package.
sudo apt-get install php5-cgi
enable fastcgi modules
sudo lighttpd-enable-mod fastcgi fastcgi-php
and finally reload
sudo service lighttpd force-reload

answered Nov 05 '14 at 06:52

Tomáš Mika

111
1
2

this is the only code worked with me I'm using php5-cgi – Salem Nov 28 '14 at 16:25
1

Should use 'sudo apt-get install php7.0-cgi' for modern disto's – Nimjox Dec 17 '17 at 04:04
`sudo apt-get install php5.6-cgi` – HM Tanbir Feb 07 '18 at 13:04
Since `php5-cgi` is not supported at moment. – HM Tanbir Feb 07 '18 at 13:04

max kaplan · Answer 3 · 2014-02-14T19:30:46.273

6

I had the same issue. The fix was as simple as moving the config files so there were enabled. All I did was...

$ ln -s /etc/lighttpd/conf-available/10-fastcgi.conf /etc/lighttpd/conf-enabled/
$ ln -s /etc/lighttpd/conf-available/15-fastcgi-php.conf /etc/lighttpd/conf-enabled/

and reload...

$ service lighttpd force-reload

edited Feb 14 '14 at 19:30

answered Jul 16 '13 at 20:38

max kaplan

541
4
13

2

This is not a correct way to do this. You must have not ran the lighty-enable-mod commands. – Robert Baker Feb 14 '14 at 18:27

score 4 · Answer 4 · edited Apr 03 '16 at 17:36

4

On ubuntu you can do this:

sudo lighty-enable-mod fastcgi 
sudo lighty-enable-mod fastcgi-php

Source: https://wiki.ubuntu.com/Lighttpd%2BPHP

edited Apr 03 '16 at 17:36

Sevle

3,109
2
19
31

answered Apr 03 '16 at 17:03

Geom16

41
1

Scryptronic · Answer 5 · 2015-02-26T03:31:57.210

1

Unlikely, but should be noted as another possible reason for "403 Forbidden" responses.

Check for any access module (mod_access) statements in the config file (lighttpd.conf)

Example:

      url.access-deny = ( "", ".php");

Docs: Module mod_access

edited Feb 26 '15 at 03:31

answered Feb 26 '15 at 02:19

Scryptronic

111
1
4

score 1 · Answer 6 · answered Nov 12 '22 at 15:56

1

you need to config ur lighttpd :

just :

sudo lighty-enable-mod fastcgi; sudo lighty-enable-mod fastcgi-php; sudo service lighttpd force-reload

answered Nov 12 '22 at 15:56

aerrajiy

21
2

Duplicate Answer. Similar to the answer provided previously by @Geom16 with only one more instruction. Please consider adding the additional instruction as a comment to the original answer. – Missaka Iddamalgoda Nov 15 '22 at 11:16
This does not provide an answer to the question. Once you have sufficient [reputation](https://stackoverflow.com/help/whats-reputation) you will be able to [comment on any post](https://stackoverflow.com/help/privileges/comment); instead, [provide answers that don't require clarification from the asker](https://meta.stackexchange.com/questions/214173/why-do-i-need-50-reputation-to-comment-what-can-i-do-instead). - [From Review](/review/late-answers/33166892) – ahuemmer Nov 19 '22 at 07:54

Lighttpd 403 Forbidden for PHP files

6 Answers6