A Dutch web developer has created a rootkit that hides inside a PHP module and can be used to take over web servers via a rarely used attack vector: Apache modules.

Most real-world Web applications will want a bunch of additional PHP modules installed. If we wanted to install WordPress, for instance, we'd want the following laundry list of PHP extensions: ...

Here's a quick tutorial on how to setup Nginx with PHP support. The key? The installation of fastCGI, aka PHP-FPM, so Nginx can serve PHP files to clients.