Navigation

HungiTi · #1 29th July 2010, 10:10

Hi everybody,

Safemode is not used in ISPConfig 3 as it is marked as deprecated by the PHP developers and will be removed from new php versions, but someone want enable it in old php versions, please follow intructions:

* Notice: Only used for php mode Fast-CGI.

1. Run mysql text on dbispconfig database:

Code:

ALTER TABLE `web_domain` ADD `safemode` ENUM( 'Off', 'On' ) NOT NULL DEFAULT 'On' AFTER `suexec` ;
UPDATE web_domain set safemode='Off';

2. Add below code after row 170 in file /usr/local/ispconfig/interface/web/sites/form/web_domain.tform.php:

PHP Code:


			
'safemode' => array (

'datatype' => 'VARCHAR',

'formtype' => 'CHECKBOX',

'default' => 'On',

'value' => array(0 => 'Off',1 => 'On')

),

3. Add below html after row 73 in file /usr/local/ispconfig/interface/web/sites/templates/web_domain_edit.htm:

HTML Code:

<div class="ctrlHolder">
<p class="label">Safe Mode</p>
<div class="multiField">
{tmpl_var name='safemode'}
</div>
</div>

4. Add text below after row 15 in file /usr/local/ispconfig/server/conf/php-fcgi-starter.master:

Code:

-d safe_mode=<tmpl_var name='safemode'> \

5. Add code below after row 720 in file /usr/local/ispconfig/server/plugins-available/apache2_plugin.inc.php:

PHP Code:


			
$fcgi_tpl->setVar('safemode',escapeshellcmd($data["new"]["safemode"]));

Sample picture

Finish, test again, good luck.

till · #2 29th July 2010, 10:24

Please be aware that you can not install any ispconfig updates after you modified the web_domain table like this. Every future ispconfig udate will fail with a empty database.

HungiTi · #3 29th July 2010, 10:48

I agree with you.

Because I'm using old PHP version (5.2.14) (I upgraded to PHP 5.3.3 but unsuccessful) and want more security, so I prefer to safe_mode on.

With a similar way, I've added disable_functions (in php mode Fast-CGI) in sites to more security on share hosting, I think add it into default new version ?

Thanks.

till · #4 29th July 2010, 10:51

ISPConfig 3.0.3 has a function for custom php.ini settings for all php types (cgi,fcgi,suphp and mod_php) which can be used to set values like safemode.

HungiTi · #5 29th July 2010, 11:23

I use CentOS 5.5. Would you like tell me more detail about that in ISPConfig 3.0.3 ? It have in ISPConfig 3.2.2 ? Where I can set it ?

I tested in Apache directives on Sites tab, but unsuccessful. I search on internet and found a method (http://www.howtoforge.com/forums/sho...82&postcount=4). If ispconfig updates, I try to modify the fcgi starter script and master template again ? It will set default in new version ?

till · #6 29th July 2010, 11:26

This is a feature of ISPConfig 3.0.3 and not 3.0.2.2, so you can not set it in 3.0.2.2 as this feature is not implemented in that version. For details of ISPConfig 3.0.3 Beta 1, please see release nostes in the ispconfig.org blog.