Safe LAMP setup?

Question

PHP

Hello!
There are a huge number of tutorials on the Internet for installing LAMP on VDS, but most of them are incomplete or outdated. Interested in how to properly and safely configure the work of sites on a bundle: Ubuntu 14, Nginx, MySQL, Apache, PHP 5.3 FPM, PHP 5.6 FPM. I usually compile both versions of PHP manually, since it is necessary for each site to choose its own version of PHP, that is, the installation itself does not raise any questions. Sites are stored in the /home/user/www/site.com/www folder. Please tell me how it is customary to set up such configurations so that when one site is hacked, the hacker cannot get out of the folder with the site and infect everything around? Maybe there are some recommendations, standards?

Answer 1

Run sites under different users, restrict access rights, disable shell.

Answer 2

Deprecated since Apache has been almost completely superseded by nginx. All new manuals are nginx manuals, and new Apache manuals are just rewrites of the old ones.