{"id":332,"date":"2010-07-03T05:13:53","date_gmt":"2010-07-03T11:13:54","guid":{"rendered":"http:\/\/blog.supportpro.com\/?p=332"},"modified":"2026-03-29T23:29:40","modified_gmt":"2026-03-30T05:29:40","slug":"how-to-check-the-server-is-suexec-enabled","status":"publish","type":"post","link":"https:\/\/www.supportpro.com\/blog\/how-to-check-the-server-is-suexec-enabled\/","title":{"rendered":"How to check the server is Suexec enabled ?"},"content":{"rendered":"\n<p>SuExec is an essential security feature used on web hosting servers to improve account isolation and protect websites from unauthorized access. Instead of running all scripts under the default web server user, SuExec allows scripts to execute under individual user accounts.<\/p>\n\n\n\n<p>This guide explains <strong>how to check if SuExec is enabled<\/strong> using SSH, WHM, or cPanel access.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What Is SuExec?<\/h2>\n\n\n\n<p>SuExec is a security mechanism commonly used on shared hosting environments. It ensures that each website runs with its own user permissions rather than sharing the same server identity.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Why SuExec Matters<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Improves server security<\/li>\n\n\n\n<li>Prevents cross-account access<\/li>\n\n\n\n<li>Isolates hosting users<\/li>\n\n\n\n<li>Reduces risks in shared hosting environments<\/li>\n<\/ul>\n\n\n\n<p>When enabled, scripts run under the account owner instead of the web server user (such as <em>nobody<\/em> or <em>apache<\/em>).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Method 1: Check SuExec Using SSH (Root Access)<\/h2>\n\n\n\n<p>If you have root access to the server, the quickest method is via SSH.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 1: Log in to the Server<\/h3>\n\n\n\n<p>Connect through SSH as root.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 2: Run the Command<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>\/usr\/local\/cpanel\/bin\/rebuild_phpconf current<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">Example Output<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>DEFAULT PHP: 5<br>PHP4 SAPI: suphp<br>PHP5 SAPI: suphp<br>SUEXEC: enabled<\/code><\/pre>\n\n\n\n<p>If you see <strong>SUEXEC: enabled<\/strong>, the feature is active on your server.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Method 2: Check SuExec via WHM<\/h2>\n\n\n\n<p>If SSH access is unavailable, you can verify the setting directly from WHM.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Steps<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Log in to <strong>WHM<\/strong>.<\/li>\n\n\n\n<li>Navigate to <strong>Configure PHP and SuExec<\/strong>.<\/li>\n\n\n\n<li>Review the status displayed on the page.<\/li>\n<\/ol>\n\n\n\n<p>WHM will clearly indicate whether SuExec is enabled or disabled.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Method 3: Check SuExec Using phpinfo (Without Root Access)<\/h2>\n\n\n\n<p>Users with only cPanel access can still confirm the configuration.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Steps<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Log in to <strong>cPanel<\/strong>.<\/li>\n\n\n\n<li>Open <strong>File Manager<\/strong>.<\/li>\n\n\n\n<li>Create a new file named:<\/li>\n<\/ol>\n\n\n\n<pre class=\"wp-block-code\"><code>phpinfo.php<\/code><\/pre>\n\n\n\n<ol start=\"4\" class=\"wp-block-list\">\n<li>Add the following code:<\/li>\n<\/ol>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;?php phpinfo(); ?&gt;<\/code><\/pre>\n\n\n\n<ol start=\"5\" class=\"wp-block-list\">\n<li>Open the file in your browser:<\/li>\n<\/ol>\n\n\n\n<pre class=\"wp-block-code\"><code>http:&#47;&#47;yourdomain.com\/phpinfo.php<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">What to Look For<\/h3>\n\n\n\n<p>Find the <strong>Server API<\/strong> value.<\/p>\n\n\n\n<p>If it shows:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Server API = CGI<\/code><\/pre>\n\n\n\n<p>then SuExec is enabled on the server.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">When Should You Use SuExec?<\/h2>\n\n\n\n<p>SuExec is recommended for:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Shared hosting servers<\/li>\n\n\n\n<li>Multi-user environments<\/li>\n\n\n\n<li>Hosting providers managing multiple accounts<\/li>\n\n\n\n<li>Servers requiring strict permission isolation<\/li>\n<\/ul>\n\n\n\n<p>Most modern hosting setups enable SuExec by default because of its strong security benefits.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Final Thoughts<\/h2>\n\n\n\n<p>Knowing how to check whether SuExec is enabled helps administrators verify server security and maintain proper user isolation. Whether you use SSH, WHM, or cPanel, confirming this configuration takes only a few minutes and can significantly improve hosting security.<\/p>\n\n\n\n<p>If you are unsure about your server configuration or need assistance, consider requesting a professional server audit to ensure your environment follows best security practices.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Need Assistance?<\/h2>\n\n\n\n<p>If you are unsure how to verify your server configuration, you can <a href=\"https:\/\/www.supportpro.com\/freecheckup.php\" title=\"\">request a free server checkup<\/a> from SupportPRO engineers for expert assistance.<\/p>\n\n\n\n<p class=\"has-text-align-center\"><span id=\"hs-cta-wrapper-9d590242-d641-4383-94b4-8cfd62f0af6b\" class=\"hs-cta-wrapper\"><span id=\"hs-cta-9d590242-d641-4383-94b4-8cfd62f0af6b\" class=\"hs-cta-node hs-cta-9d590242-d641-4383-94b4-8cfd62f0af6b\"><a href=\"https:\/\/cta-redirect.hubspot.com\/cta\/redirect\/2725694\/9d590242-d641-4383-94b4-8cfd62f0af6b\"><\/a><\/span><\/span><\/p>\n\n\n\n<div class=\"wp-block-media-text alignwide has-media-on-the-right is-stacked-on-mobile is-vertically-aligned-center has-white-background-color has-background\"><div class=\"wp-block-media-text__content\">\n<p class=\"has-large-font-size\">Facing issues? <\/p>\n\n\n\n<p class=\"has-large-font-size\">Our technical support<br>engineers can solve it. <\/p>\n\n\n\n<!--HubSpot Call-to-Action Code --><span class=\"hs-cta-wrapper\" id=\"hs-cta-wrapper-3350a795-db50-482f-9911-301930d1b1be\"><span class=\"hs-cta-node hs-cta-3350a795-db50-482f-9911-301930d1b1be\" id=\"hs-cta-3350a795-db50-482f-9911-301930d1b1be\"><!--[if lte IE 8]><div id=\"hs-cta-ie-element\"><\/div><![endif]--><a href=\"https:\/\/cta-redirect.hubspot.com\/cta\/redirect\/2725694\/3350a795-db50-482f-9911-301930d1b1be\" ><img decoding=\"async\" class=\"hs-cta-img\" id=\"hs-cta-img-3350a795-db50-482f-9911-301930d1b1be\" style=\"border-width:0px;\" src=\"https:\/\/no-cache.hubspot.com\/cta\/default\/2725694\/3350a795-db50-482f-9911-301930d1b1be.png\"  alt=\"Contact Us today!\"\/><\/a><\/span><script charset=\"utf-8\" src=\"https:\/\/js.hscta.net\/cta\/current.js\"><\/script><script type=\"text\/javascript\"> hbspt.cta.load(2725694, '3350a795-db50-482f-9911-301930d1b1be', {\"useNewLoader\":\"true\",\"region\":\"na1\"}); <\/script><\/span><!-- end HubSpot Call-to-Action Code -->\n<\/div><figure class=\"wp-block-media-text__media\"><img fetchpriority=\"high\" decoding=\"async\" width=\"904\" height=\"931\" src=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup.png\" alt=\"guy server checkup\" class=\"wp-image-12943 size-full\" srcset=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup.png 904w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup-291x300.png 291w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup-768x791.png 768w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup-585x602.png 585w\" sizes=\"(max-width: 904px) 100vw, 904px\" \/><\/figure><\/div>\n","protected":false},"excerpt":{"rendered":"<p>SuExec is an essential security feature used on web hosting servers to improve account isolation and protect websites from unauthorized access. Instead of running all scripts under the default web&hellip;<\/p>\n","protected":false},"author":4,"featured_media":16798,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_lmt_disableupdate":"","_lmt_disable":"","footnotes":""},"categories":[1],"tags":[],"class_list":["post-332","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-miscellaneous"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts\/332","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/comments?post=332"}],"version-history":[{"count":5,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts\/332\/revisions"}],"predecessor-version":[{"id":16797,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts\/332\/revisions\/16797"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/media\/16798"}],"wp:attachment":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/media?parent=332"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/categories?post=332"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/tags?post=332"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}