The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
1answer
64 views

NGINX and PHP FPM - general setup and performance issues using open_basedir

I want to configure an NGINX server, which is able to host multiple websites, which are seperated from each other, so vhosta can't access files from vhostb. I installed a fresh Debian 7.5 server and ...
0
votes
0answers
91 views

Wildcard in php.ini configuration - editing open_basedir directive

Is there a way to add wildcards in the global php.ini file? I'm trying to modify the open_basedir directive in the php.ini file as follows: open_basedir = ...
1
vote
1answer
173 views

Why is PHP open_basedir not considered a security model

On servers doing shared web hosting, or sharing the PHP environment between different PHP applications, I usually implement a security policy that uses PHP open_basedir to restrict each user to ...
0
votes
2answers
304 views

Does open_basedir works recursive?

Does open_basedir works recursive? For example if I write in php.ini something like: open_basedir=/client3/web3/web Does it include all directories in /client3/web3/web (/client3/web3/web/1, ...
0
votes
1answer
400 views

How do i set a open_basedir with php using fastcgi/apache2 on linux?

I tried to add this line to my virtual hosts in Apache, but failed: php_admin_value open_basedir "/var/www/users/test" My installation: root# apt-get install apache2 apache2-suexec ...
-1
votes
2answers
321 views

Is it safe to add /usr/bin to open_basedir?

A hacking incident a couple of months ago taught me the importance of using open_basedir on PHP sites. But now I need to get ImageMagick to work on a Drupal site and I get an error saying it can't ...
0
votes
1answer
318 views

Plesk open_basedir restriction in effect - restart server issue

Hello Everybody, I got Plesk on a dedicated server. I had open_basedir restriction in effect error in my php application, so i have edited the php.ini files on server core and created one within ...
3
votes
1answer
1k views

Can php-fpm support open_basedir set dynamically for multiple virtual hosts with a single user pool?

I am running into a problem where trying to set open_basedir dynamically under nginx (and apache) for php-fpm is "bleeding through" to other vhosts when running php-fpm as user "nobody" (for legacy ...
1
vote
0answers
186 views

Jail PHP to OpenBasedir or Document Root Debian

I have a VServer running with Debian Squeeze Debian Squeeze / Apache2 / FastCGI / MySQL / Froxlor. The administration of Customers, Domains and FTP Accounts are performed using Froxlor. Following ...
2
votes
1answer
353 views

open_basedir problems with APC and Symfony2

I'm currently setting up a shared staging environment for one of our applications, written in PHP5.3 and using the Symfony2 framework. If I only host a single instance of the application per server, ...
2
votes
1answer
351 views

MediaWiki “open_basedir restriction in effect”

I installed a local MediaWiki and gave it access to the following directories in php.ini: open_basedir = /srv/http/:/home/:/tmp/:/usr/share/pear/:/usr/share/webapps/mediawiki Why do I still get the ...
1
vote
1answer
2k views

how to add an open_basedir path in nginx vhost

In php.ini I've set open_basedir = /home/user/web/ Now I would like to run phppgadmin on a subdomain which needs to include files from /usr/share/phppgadmin. So I added the following line to the ...
0
votes
1answer
429 views

OPENCART - Warning: require(): open_basedir restriction in effect

I have problem on my new, first VPS with CentOs and ISPconfig. I can install eshop OpenCart ( opencart.com ) My domain: jonnie.cz ( If you doesnt see any error, refresh the page ) In settings of ...
1
vote
1answer
331 views

open_basedir error, even though directory is clearly allowed

I'm having trouble with open_basedir. I just discovered the following while randomly checking my PHP error log: [25-Apr-2012 10:49:58 UTC] PHP Warning: is_file(): open_basedir restriction in effect. ...
0
votes
2answers
1k views

open_basedir and wordpress

Essentially i found out you can prevent one site which has a security hole from modifying/reading another site via "open_basedir". However when i upload media files using wordpress i got the error ...
0
votes
1answer
259 views

make two different domains accessible to each other whm reseller account

I have a WHM reseller account which has 2 configured domains (each one with his own cPanel account. I need to be able share some code between both domains. What should I do? One thing I need do do ...
0
votes
1answer
385 views

Mediatemple: PHP open_basedir doesn't open private folder

On Mediatemple, I have a file in /var/www/vhosts/domain.com/private that needs to be included in a PHP script. I've changed vhost.conf, changed /etc/php.ini and no matter what, I still get "failed to ...
1
vote
1answer
2k views

php.ini use multiple include paths - openbasedir restriction

I need to allow an include path for a vhost subdomain on Plesk 10. I've edited the PHP PEAR path into /etc/php.ini as I'm happy for it to be globally available: include_path = ".:/usr/share/pear/" ...
1
vote
1answer
242 views

ApacheHTTPD mod_suexec, safe_mode, open_basedir

as the Debian developers consider safe_mode (which will not make it into PHP6) and open_basedir inherently broken security measures, I wonder if they can be considered replaceable by mod_suexec ...
0
votes
2answers
534 views

Server Error (open_basedir restriction) with PHP Mailer?

I am receiving an open_basedir restriction at random times when consumers are finishing an enrollment on my website. I am able to complete the enrollment process just fine from my machine, as well ...
1
vote
1answer
2k views

PHP Safe Mode/open_basedir - lstat performance problem

PHP lstat the full path many times before read the file is looking for. And this happens when in apache httpd configuration is specified PHP_ADMIN_VALUE open_basedir setting or if safe_mode is ON. If ...
0
votes
2answers
172 views

Prevent access to files of other users

In my server (cpanel) I see now that with a simple DIR script (PHP) I can list files of all users over public_html /home/[user]/public_html/ How can I prevent users from accessing the files of other ...
0
votes
1answer
92 views

PHP's open_basedir value giving a binary value in Apache logs

Reviewing logfiles to figure out why my site was down a few days ago, I found hundreds of lines like these (partially redacted with "x"): [Fri Nov 27 23:14:36 2009] [error] [client ...
1
vote
1answer
54 views

open_basedir in reverse… kind of…

We have several vhosts that all include files from another vhost so in the httpd.conf we have added php_admin_value open_basedir "..........:/home/commonfi" I was wondering whether I could add ...