LAMP（Linux-Apache-MySQL-PHP）架构是一套用于开发和部署动态网站及Web应用程序的开源软件包。Linux作为操作系统，提供了稳定且高效的运行环境。Apache作为Web服务器，负责处理HTTP请求。MySQL提供关系型数据库服务，用于数据存储和管理。PHP则是一种流行的服务器端脚本语言，用于实现网站的动态功能。本文详细描述了在Linux服务器上部署LAMP架构的过程。

Apache：主要用于接收用户的请求，处理业务逻辑，返回结果给客户端（浏览器）

PHP：编程语言的一种，主要应用于Web开发。主要实现注册、登录、加入购物车、下单、支付等功能

MySQL：数据库，删库到跑路，这里的"库"就是指数据库。永久保存数据

任务

场景：程序员书写了一个php代码发给我们部署下。

1. 测试能否直接部署到nginx中？

2. 需要什么服务，是什么原理？

3. 准备服务并测试。

4. 部署代码。

1.概述

如何区分静态资源和动态资源

通过url初步判断，网站的类型

url中包含&或？一般是动态网站

2. 常见的动态网站的架构

2.1 关闭防火墙

systemctl stop firewalld
systemctl disable firewalld

2.2 关闭SELinux

SELinux(Security-Enhanced Linux) 是美国国家安全局（NSA）对于强制访问控制的实现，是Linux历史上最杰出的新安全子系统。

获取SELinux的状态：

getenforce

临时关闭SElinux：重启后SELinux还会自动启动

setenforce 0

永久关闭SELinux：编辑SELinux的配置文件

vim /etc/selinux/config
# 打开后设置SELINUX=disabled，按 :wq保存退出

3. LAMP/LNMP架构细节

3.1 数据库

db01数据库：193.168.174.51/172.16.1.51

[root@db01 ~]# yum -y install mariadb-server
[root@db01 ~]# systemctl start mariadb
[root@db01 ~]# systemctl enable mariadb
 
#数据库安全配置，仅仅刚安装的时候运行，仅首次运行即可，用于设置root密码，清理用户和临时数据库
[root@db01 ~]# mysql_secure_installation
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!
 
In order to log into MariaDB to secure it, we'll need the current
password for the root user.  If you've just installed MariaDB, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.
 #当前数据库密码为空，按回车键
Enter current password for root (enter for none): 
OK, successfully used password, moving on...
 
Setting the root password ensures that nobody can log into the MariaDB
root user without the proper authorisation.
 #输入Y
Set root password? [Y/n] Y
#输入新密码和确认密码
New password: 
Re-enter new password: 
Password updated successfully!
Reloading privilege tables..
 ... Success!
By default, a MariaDB installation has an anonymous user, allowing anyone
to log into MariaDB without having to have a user account created for
them.  This is intended only for testing, and to make the installation
go a bit smoother.  You should remove them before moving into a
production environment.
 #删除数据库中的匿名用户(没有用户名的用户,容易导致安全问题)
Remove anonymous users? [Y/n] Y     
 ... Success!
 
Normally, root should only be allowed to connect from 'localhost'.  This
ensures that someone cannot guess at the root password from the network.
 #是否禁止root远程登录,也可以n
Disallow root login remotely? [Y/n] Y  
 
 ... Success!
 
By default, MariaDB comes with a database named 'test' that anyone can
access.  This is also intended only for testing, and should be removed
before moving into a production environment.
 #是否删除test测试用的数据库
Remove test database and access to it? [Y/n] Y  
 - Dropping test database...
 ... Success!
 - Removing privileges on test database...
 ... Success!
 
Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.
 #是否更新权限信息表
Reload privilege tables now? [Y/n] Y    
 ... Success!
 
Cleaning up...
 
All done!  If you've completed all of the above steps, your MariaDB
installation should now be secure.
 
Thanks for using MariaDB!
​
[root@db01 ~]# mysql -uroot -p123456
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 190
Server version: 5.5.68-MariaDB MariaDB Server
 
Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.
 
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
 
MariaDB [(none)]> 
 

数据库基本概念

库:database 相当于1个execl文件

表:table 相当于是1个execl文件的1个sheet

字段: 列 某列的名字，字段名字

记录:行 某个人的数据

#查看系统所有的数据库
MariaDB [(none)]> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| mysql              |
| performance_schema |
| test               |
| wordpress          |
+--------------------+
5 rows in set (0.00 sec)
 
#查看库里的表
MariaDB [(none)]> show tables from mysql;
+---------------------------+
| Tables_in_mysql           |
+---------------------------+
| columns_priv              |
| db                        |
| event                     |
| func                      |
| general_log               |
| help_category             |
| help_keyword              |
| help_relation             |
| help_topic                |
| host                      |
| ndb_binlog_index          |
| plugin                    |
| proc                      |
| procs_priv                |
| proxies_priv              |
| servers                   |
| slow_log                  |
| tables_priv               |
| time_zone                 |
| time_zone_leap_second     |
| time_zone_name            |
| time_zone_transition      |
| time_zone_transition_type |
| user                      |
+---------------------------+
24 rows in set (0.00 sec)
 
#显示mysql库的user表的user列和host列 (列字段),查看数据库的用户信息
MariaDB [(none)]> select user,host from mysql.user;
+------+------------+
| user | host       |
+------+------------+
| root | 127.0.0.1  |
| test | 172.16.1.% |
| root | ::1        |
| root | localhost  |
| test | localhost  |
+------+------------+
5 rows in set (0.00 sec)
 
#\G  显示的时候好看些
select  * from test.wp_posts \G;
 
#创建数据库
MariaDB [(none)]> create database test;
 
#创建用户，进行授权
grant 所有权限   on 数据库.* to  '用户名'@'白名单'
MariaDB [(none)]> grant all on test.* to 'test'@'localhost' identified by '123456';
MariaDB [(none)]> grant all on test.* to 'test'@'172.16.1.%' identified by '123456';
 
#查看用户授权
show grants for  'test'@'172.16.1.%';  
#删除数据库
MariaDB [(none)]> drop database test; 
#删除用户
drop user 'test'@'172.16.1.%';  
#刷新用户权限表
flush privileges; 
#测试远程连接
mysql -utest -p1  -h 172.16.1.51

数据库白名单说明:

白名单表示用户可以从哪里进行登录与使用数据库.

一般localhost表示只能在数据库本地使用.

可以通过172.16.1.% 进行授权局域网访问.

其他局域网机器可以访问数据库.

只给个%表示所有人可以访问(不安全). %不包含localhost.

3.2 php

yum install -y httpd httpd-devel mariadb-devel php php-mysql php-devel
​
​
vi /etc/httpd/conf/httpd.conf
#创建index.php
cd /var/www/html
​
<?php
  phpinfo();
?>
​
​
#/etc/httpd/conf/httpd.conf  42行

部署root@'%'的权限，创建wordpress库；

3.3 wordpress

#上传到~
unzip wordpress-4.7.3-zh_CN.zip
​
cp -rvf wordpress/* /var/www/html/
​
 chmod 777 -R /var/www/html
 
cp wp-config-sample.php wp-config.php
​
vim wp-config.php 

3.4测试

登录192.168.3.7或加端口88

总结