PHP Security settings for websites?

[crypted]

Okay, I have been having a heck of a time trying to use automatic update with Wordpress. Finally, I'm realizing it has to do something with the settings for the PHP security on the websites.

ISPConfig2 had the SAFEMODE setting which would screw stuff up, but this does not.

Here's one of the errors:
Warning: is_readable() [function.is-readable]: open_basedir restriction in effect. File(/var/www/clients/client1/web5/web/wp-content/advanced-cache.php) is not within the allowed path(s): (/var/www/clients/client1/web5/web:/var/www/clients/client1/web5/tmp:/var/www/areyouliberal.com/web:/srv/www/areyouliberal.com/web:/usr/share/php5:/tmp:/usr/share/phpmyadmin) in /var/www/clients/client1/web5/web/wp-admin/includes/plugin.php on line 348

I'm using Mod-PHP.

Any thoughts on getting straight PHP operational without these restrictions?

[till]

Any thoughts on getting straight PHP operational without these restrictions?

I run several wordpress sites on ispconfig, all work perfectly.

I'm using Mod-PHP.

Thats the reason why it does not work. The automatic update needs write permissions to the folders and mod_php is only used if applications shall not have write permissions to the folders.

Chnage the php settings of the website to php-fcgi and enable the suexec checkbox. Then make sure that all files and folders in the "web§ folder of the website belong to the website user and group.

[crypted]

Almost resolved! Now, I can do updates, but I gain a new error:

Warning: session_start() [function.session-start]: open(/var/www/clients/client1/web26/tmp/sess_ffa61689d606b9aa3ef614d4704eaa64, O_RDWR) failed: Permission denied (13) in /var/www/clients/client1/web26/web/wp-content/plugins/si-contact-form/si-contact-form.php on line 1068

Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /var/www/clients/client1/web26/web/wp-content/plugins/si-contact-form/si-contact-form.php:1068) in /var/www/clients/client1/web26/web/wp-content/plugins/si-contact-form/si-contact-form.php on line 1068

Warning: Cannot modify header information - headers already sent by (output started at /var/www/clients/client1/web26/web/wp-content/plugins/si-contact-form/si-contact-form.php:1068) in /var/www/clients/client1/web26/web/wp-includes/pluggable.php on line 890

Warning: Unknown: open(/var/www/clients/client1/web26/tmp/sess_ffa61689d606b9aa3ef614d4704eaa64, O_RDWR) failed: Permission denied (13) in Unknown on line 0

Warning: Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/var/www/clients/client1/web26/tmp) in Unknown on line 0

A support forum guru at Wordpress told me that it's a webhost problem:

PHP sessions are required to set a cookie, or the CAPTCHA will not work.

This error is telling you the PHP sessions are broken on your server
installation because it cannot find or read the session directory. Make
a trouble ticket with your web host. Send them the error and a URL link
to the page with error. They will fix it.

So what would cause that?

[crypted]

This only occurs with FAST-CGI and not Mod-PHP...

[till]

This happens because you had switched from mod_php to fast-cgi without closing the browser of the website you are using and / or without clearing the session directory. Run:

rm -f /var/www/clients/client1/web26/tmp/*

to clear the session dir.

[crypted]

Seems to work perfect. Thanks man!!!!