#1  
Old 16th September 2008, 04:10
CubAfull CubAfull is offline
Junior Member
 
Join Date: Jun 2008
Location: Cuba
Posts: 24
Thanks: 11
Thanked 4 Times in 2 Posts
Default open_basedir problem.

ok
were i can change the value for open_basedir to no value

I try to modify my php.ini but the changes will not take effect

I need open_basedir no value

I always get open_basedir /var/www/web5

Im using:

Debian etch, suPHP, ISPConfig 2.2.25.

I have a script that need this configuration.

please help.
__________________
-------------
>> CUBA <<

-------------
Reply With Quote
Sponsored Links
  #2  
Old 16th September 2008, 17:33
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 37,006
Thanks: 840
Thanked 5,650 Times in 4,460 Posts
Default

Ths value can not be changed individually. The only thing you can do is to disable php for the wesbite and then configure php manually by adding directives to the apache directives field without using the suphp wrapper script from ispconfig. Please be aware that it is security risk to run scripts without the open_basedir restriction.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 16th September 2008, 18:22
CubAfull CubAfull is offline
Junior Member
 
Join Date: Jun 2008
Location: Cuba
Posts: 24
Thanks: 11
Thanked 4 Times in 2 Posts
Default

thank you till, im the only user in the server.....is for my own domains

this is the correct script to change this value?
/home/admispconfig/ispconfig/tools/suphp/usr/bin/php-wrapper

i need to change this

Code:
exec php-cgi -d open_basedir=${BASEDIR} -d upload_tmp_dir=${TMPDIR} -d session.save_path=${SESSDIR} -d safe_mode=${SAFE_MODE}
to

Code:
exec php-cgi -d upload_tmp_dir=${TMPDIR} -d session.save_path=${SESSDIR} -d safe_mode=${SAFE_MODE}

is correct ?? or.... which is the correct way?
__________________
-------------
>> CUBA <<

-------------
Reply With Quote
  #4  
Old 16th September 2008, 18:28
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 37,006
Thanks: 840
Thanked 5,650 Times in 4,460 Posts
Default

Quote:
is correct ?? or.... which is the correct way?
Yes.

If you are the only user, then its fine to change it globally. You should just be aware that if you run sites on the internet and one gets hacked, this might affect the whole server then.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 16th September 2008, 18:48
CubAfull CubAfull is offline
Junior Member
 
Join Date: Jun 2008
Location: Cuba
Posts: 24
Thanks: 11
Thanked 4 Times in 2 Posts
Default

Quote:
Originally Posted by till View Post
If you are the only user, then its fine to change it globally. You should just be aware that if you run sites on the internet and one gets hacked, this might affect the whole server then.
Upss....is really dangerous

one more thing (only to learn)
in CPanel you can turn the open_basedir on or off.....
in this case is a security risk to ?.....


thank you till for your prompt response.
__________________
-------------
>> CUBA <<

-------------
Reply With Quote
  #6  
Old 16th September 2008, 18:58
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 37,006
Thanks: 840
Thanked 5,650 Times in 4,460 Posts
Default

Quote:
in this case is a security risk to ?.....
Yes. This does not depend on the controlpanel. If OpenBasedir is off, a PHP script may access the whole server. For example:

$lines = file('/etc/passwd');
print_r($lines);

would output you a list of all users that are on the server, if openbasedir is not enabled as the passwd file is world readable.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
postfix problems with smtp linkdeb Server Operation 13 15th March 2014 18:58
Strange email problem for one of my domains... any help appreciated paulrobert_a Installation/Configuration 5 9th August 2010 15:15
sending e-mail using mail() function linuxuser1 HOWTO-Related Questions 38 21st April 2009 13:20
Virtual users... Ubuntu 8.04 spaceuser HOWTO-Related Questions 12 19th June 2008 09:04
Postfix+MySQL Problem jasutton Installation/Configuration 1 15th June 2006 17:06


All times are GMT +2. The time now is 10:55.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.