9. PHP, LAMP and LEMP Step by Step
9.1 Static vs Dynamic and How PHP Runs
Static site madhe server fakt file uchalun deto. Dynamic site madhe server aadhi code chalavto (PHP), code database la vicharto, aani mag tayar zalela HTML pathavto.
Static: Browser --GET /about.html--> Nginx --reads file--> same HTML for everyone
Dynamic: Browser --GET /feed.php--> Nginx --FastCGI--> PHP-FPM --SQL--> MySQL
|
HTML built for THIS user <--+
| Way to run PHP | Used with | How it works |
|---|---|---|
mod_php |
Apache (common on Ubuntu) | PHP is loaded inside every Apache process |
| PHP-FPM | Nginx (always), Apache on Amazon Linux | Separate pool of PHP worker processes; web server talks to it over a unix socket (FastCGI) |
Why this matters for security
Dynamic code is where most serious web vulnerabilities live – SQL injection, XSS, file upload, command injection (Part 11). A static site has very little to attack; a PHP app that talks to a database has a lot. That is why we build one ourselves before we attack one.
Ravindra Bagale's Tip
Many students think PHP runs in the browser. No! PHP runs on the server, and the browser only receives HTML – that's why you can't see PHP code in "View Source". If PHP code shows up in the browser, the server isn't running PHP – that's a configuration mistake.
Ravindra Bagale's Tip – मराठी
बऱ्याच students ना वाटतं PHP browser मध्ये चालतो. नाही! PHP server वर चालतो आणि browser ला फक्त HTML मिळतं – म्हणून "View Source" मध्ये PHP code दिसत नाही. जर PHP code browser मध्ये दिसला, तर server PHP चालवत नाहीये – ती configuration ची चूक आहे.
Ravindra Bagale's Tip – हिंदी
बहुत से students सोचते हैं कि PHP browser में चलता है. नहीं! PHP server पर चलता है और browser को सिर्फ़ HTML मिलता है – इसलिए "View Source" में PHP code नहीं दिखता. अगर browser में PHP code दिखे, तो server PHP नहीं चला रहा – यह configuration की गलती है.
Practice task
Draw the request flow for a static page and for a PHP page, labelling the port or socket at each arrow.