Apache And Extensions

Jan 14, 2008

I have found a hole in one of my servers that someone else pointed. Here is what I found. A fake image can get uploaded to the server like test.php.psd and the server will think it is an image file but in fact it is a PHP file. Then when the server access the file Apache does not recognize the file and automatically assumes that it is a PHP file and tries to execute it as a PHP file. If the file is not recognizable and can not open it as an image file then it should not automatically try to execute it as a PHP file. Am I wronging in assuming this? Here are two sample files.

Here is a sample file that you can try:

Code:
<?php Print "Hello, World!"; ?>
[url]
[url

How can I create files like this that are not recognized by Apache from being automatically being executed as a PHP file.

View 5 Replies


ADVERTISEMENT

Ubuntu + Apache 2.0 + PHP 5.2.1 - Cannot Use Dynamic Extensions (e.g. Pdo.so)

Mar 6, 2007

I'm trying to compile PHP 5.2.1 on my Ubuntu 6.10 server. I've downloaded the source code from php.net and am running the following configure command on it:

Code:
./configure --with-apxs2=/usr/bin/apxs2 --with-mysql --with-informix=/opt/informix --enable-shared --enable-pdo=shared --without-sqlite --without-pdo-sqlite --with-pdo-mysql=shared --with-zlib --with-xml --with-pdo-informix=shared,/opt/informix
After doing this, then make, I copy over the generated libphp5.so file into my Apache extensions directory, add extension=pdo.so (and lines for the PDO-MySQL/Informix extensions) into my php.ini and restart Apache. I would expect to see PDO, PDO-MySQL and PDO-Informix listed in my phpinfo() - but they don't appear.

So, I tried recompiling PHP but without any of the PDO extensions being shared. This worked, and I could see PDO and PDO-MySQL in phpinfo(), but not PDO-Informix.

So, can anyone hazard a guess as to why none of the PDO extensions load when compiled shared? I don't get any related error messages in the Apache or System logs by the way....

View 0 Replies View Related

How To Setup Frontpage Extensions For Apache On Windows

Feb 7, 2008

Does anyone know how to install the Frontpage Server Extensions on an Apache server which is running on a Windows box? I've searched around including on Microsoft's site, but I was only able to find info on how to configure for Apache running on unix/linux.

View 0 Replies View Related

Apache :: Removing File Extensions With RewriteEngine Doesn't Work

May 7, 2015

I'm trying to accomplish a rather common task of removing file extensions, where say, instead of index.php, just index can be accessed.

I've gone through many tutorials that offer all sorts of different ways how this can be accomplished and none of it works but what's commonly given is something like this.

View 4 Replies View Related

PHP Extensions

Feb 20, 2008

We had our servers PHPsuexec enabled for both PHP 4 and 5. Clients using htaccess to enable PHP extensions are now not working.

I once read on a forum that you can make use of a custom PHP.INI in order for those extensions to work. How can we obtain or create a custom PHP.INI that we can use?

View 0 Replies View Related

FrontPage Extensions

Oct 16, 2009

I am trying to get a dedicated server from unmeteredservers.com. My website was designed with FrontPage in htm mode. The technical team is asking whether I require FrontPage Extensions, and that if I do, then I cannot use their services because FrontPage extentions has been discontinued. My site has been working very well on many shared servers, I told them. They say I shoulsd find out from my frontpage whether it uses the extensions. I have no idea where I can get that information from in my Frontpage program. How do I get that kind of information?

Meanwhile, I do know that when I used FrontPage to upload my site, the Panels peovided an option to intall the extensions. But now that I upload with CuteFTP, no server has since requested for the extensions to be installed. Will my site work on the server if I simply upload via an FTP without any FrontPage extensions installed?

View 12 Replies View Related

PEAR Extensions

Jun 14, 2008

how uncommon it is for a hosting company to install PEAR extensions for their clients. Why I ask is because I am not sure how to install them myself. I currently use WAMP, which installed PHP, APACHE, and MySQL for me. So I am looking for a way to use PEAR extensions. If not on my personal machine, a server would be fine.

I guess I am looking for some suggestions. Pershaps something like WAMP which makes it very simple, or a hosting company you know that will install extensions for someone on a shared account.

View 1 Replies View Related

Zend Extensions

Jul 25, 2008

Basically I have a script that is trying to run zend optimizer via command line, but is producing this error

The CLI version of PHP does not have the Zend Optimizer extension enabled

logged in as root

# /usr/local/bin/php -v
PHP 5.2.6 (cli) (built: Jul 23 2008 00:22:17)
Copyright (c) 1997-2008 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2008 Zend Technologies
with the ionCube PHP Loader v3.1.32, Copyright (c) 2002-2007, by ionCube Ltd., and
with Zend Extension Manager v1.2.2, Copyright (c) 2003-2007, by Zend Technologies
with Zend Optimizer v3.3.3, Copyright (c) 1998-2007, by Zend Technologies

# php --ini
Configuration File (php.ini) Path: /usr/local/lib
Loaded Configuration File: /usr/local/Zend/etc/php.ini
Scan for additional .ini files in: (none)
Additional .ini files parsed: (none)

login as: doni

$ /usr/local/bin/php -v
PHP 5.2.6 (cli) (built: Jul 23 2008 00:22:17)
Copyright (c) 1997-2008 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2008 Zend Technologies
ngine v2.2.0, Copyright (c) 1998-2008 Zend Technologies

$ php --ini
Configuration File (php.ini) Path: /usr/local/lib
Loaded Configuration File: (none)
Scan for additional .ini files in: (none)
Additional .ini files parsed: (none)

This is same for both users
# which php
/usr/local/bin/php

For some reason on my normal user it is not showing a loaded configuration file.

View 1 Replies View Related

FrontPage Extensions

Jul 24, 2008

Since a recent server and control panel move (we switched from Enism X to CPanel 11 on CentOS 5), our accounts no longer work with any version of FrontPage prior to 2003. You can't even bring up the authentication window in FrontPage 2000, it spits out an error saying that there's a problem with WWW-Authenticate (or similar, don't have exact error as I dont own a copy of FP2000, but that's what a few clients are reporting).

Has anyone had any similar experiences and would you have any advice to give so that I may somehow fix this problem? I know FP has been EOL for some time now but it doesn't change that many of my customers still use it and expect their services to keep working on the new platform.

View 2 Replies View Related

Frontpage Extensions

Nov 25, 2008

i have a customer who had a site in somwhere else.he used to upload his files via frontpage with the frontpage extensios way.in my server i have install frontpage extensios.the problem is that when he tries topublish the files whichs edits the changes in NOT going to the files which are in public_html folder but it is automated creating a new folder with the name domain.gr. AND THERE PUTS ALL THE FILES WHICH are changing.

what i must change so the changes to be in files in public_html and also stop creating folder with the name domain.gr.i hope you understand the frontpage extensios.i havent experienced before

View 2 Replies View Related

Frontpage Extensions

Nov 14, 2007

I am preparing a server to do some hosting, but need the newest frontpage extensions. I noticed in Centos 4.5 running Cpanel it has this. Does anyone have access to the files needed to accomplish this as well as any config info?

View 6 Replies View Related

How To Install Extensions For Php-cgi

Feb 20, 2007

If you have the cgi version of php, how do you go about using/installing php extensions?

If it helps...
WindowsXP Pro
IIS 5.1
PHP 5.2.1

View 1 Replies View Related

Configure IIS To Parse Css Extensions

Feb 16, 2007

I am not sure what forum this is for but I think I have the right one. I am having a heck of a time getting my IIS server to parse files with the .css extension properly. Can someone give a newb some advice on how to do this?

I think it is IIS 6.

The problem arose when I tried to use external style sheets and while IE handles them fine Firefox does not. I have been told this is because of the way my server deals with the css extension.

View 4 Replies View Related

Enabling Support Of These Php Extensions

Sep 8, 2007

i just got setup with a dedicated linux server with cpanel/whm access and root and well i have a site on the server that im installing some software on and its come up saying that my server does not support these things and to change them

PHP Extension: GD
Your server does not support GD Library and cannot use (thumbnail generation, re-size/scale, etc).

PHP Function: mb_detect_encoding()
Your server does not support multibyte character encoding.

PHP Extension: openssl()
Your server does not support the openssl().

to take within my root access to turn on/ enable support for these functions and extension

View 3 Replies View Related

How Can I Install Frontpage Extensions On IIS 7.0 Webserver?

Jul 28, 2009

How can i install Frontpage extensions on IIS 7.0 webserver?

View 6 Replies View Related

FrontPage Extensions On Debian/Plesk 8.6

Nov 22, 2008

I want to get FrontPage Extensions on debian/Plesk 8.6 to work and was hoping to get some feedback and tips on possibility and reliability.

View 2 Replies View Related

How To Add Extensions That Don't Exist In Zend Core For Oracle

Aug 13, 2007

I've installed Zend Core for Oracle on a RH ES4 server. Unfortunately, ZCO doesn't have the Postgres extension enabled by default.

Do I have to recompile my PHP installation to enable it?

View 0 Replies View Related

Plesk Automation :: Postfix Address Extensions

Sep 8, 2014

Is it possible to enable postfix address extensions while still having "What to do with mail sent to nonexistent users" set to "Reject"? I am trying to get confirmation to work where we have:

Code : user@domain.com

as a valid mailbox. I want emails addressed to

Code : user+confirm+2945o2419485@domain.com

to be also delivered to user@domain.com. But its being blocked by the plesk delivery service. Is there a way to get around that? FYI - the numbers are dynamically generated, so setting up an alias for that specific address will not work.

View 4 Replies View Related

Plesk 12.x / Linux :: Can't Install Or Remove Extensions After Upgrade

Sep 10, 2014

We can't install or remove any extension after upgrade to Plesk 12.0.8 from 11.5. When we go to Extensions Management > Add Extension for uploading a new extension, we are only allowed to use .deb and .zip. Before we had rpm and zip. This upgrade has been done on a Linux Server with CentOS installed (rpm based). How can we change the allowed extension for uploading an rpm file?

View 5 Replies View Related

Plesk 11.x / Linux :: Multiple PHP Versions - How To Install Extensions

May 27, 2014

I have installed PHP5.5.12 as the secondary php version. The primary version (installed with plesk) is php5.4 .

Now when I try to install extensions, every time they are installing to the primary version.

How can I install extensions special for the other version?

I have Debian 7 x64 and parallels plesk 11.5

View 3 Replies View Related

Can't Load Extension /usr/local/lib/php/extensions/no-debug-non-zts-20020429/ffmpeg.s

Oct 1, 2007

i tried installing ffmpeg yesterday using an auto install script but when i go to the url it gave me to test ffmpeg it get this error

Can't load extension /usr/local/lib/php/extensions/no-debug-non-zts-20020429/ffmpeg.so

anyone hae any ideas i really dont have a clue using a vps running cpanel

View 5 Replies View Related

Plesk 12.x / Linux :: Extensions Catalog Not Visible After Auto-update To 12.0.18

Sep 11, 2014

OS : centos 6.5 2.6.32-431.23.3.el6.x86_64 actual plesk version 12.0.18 after auto-update google authentication and 3other extensions were enabled and now google authentication isn't in the list of installed extensions and not functioning i was able to login as before without google authentication but when I wanted to reinstall the extension catalog shows a empty screen I have ran /usr/local/psa/admin/sbin/autoinstaller --select-release-current --upgrade-installed-components & /usr/local/psa/bootstrapper/pp12.0.18-bootstrapper/bootstrapper.sh repair no luck where to look or to reinstall the extention catalog ?

View 3 Replies View Related

Apache :: Capturing Internal Apache Errors Return Custom HTTP Status

Nov 15, 2013

Server Version: Apache/2.2.22 (Unix)

On our production service, we've been getting numerous malformed POST requests to some of our CGI scripts that are showing up as 500 errors in our logs. They are malformed in the sense that the actual content length doesn't match the Content-Length specified in the request.

Here's the most trivial example I can come up with that reproduces the problem for us:

POST /some_valid_alias HTTP/1.1
Host: example.org
User-Agent: Arbitrary/1.0
Content-Type: multipart/form-data; boundary=---------------------------41184676334
Content-Length: 769
-----------------------------41184676334

In addition to the 500 error in the access log, we see the corresponding error in the error log:

(70014)End of file found: Error reading request entity data

Based on the nature of the POST request and the error response, it does appear that Apache is doing the right thing here.

The POST never actually makes it as far as the script being targeted (/some_valid_alias in the above example); in other words, Apache returns 500 to the client, writes the error to the error log and never executes the script.

Is there a way to capture/avoid internal Apache errors like 70014, and return some other HTTP status besides 500 (like 403)? It's particularly annoying in our case, because our server sends us an email for all 500 errors.

So far, our best "defense" against these 500 errors is to disallow POST for these aliases, which normally just ignore the POST data anyway (when the request is not malformed):

RewriteCond %{REQUEST_METHOD} ^POST$
RewriteRule ^/(some_valid_alias)(.*)$ $1$2 [R]

But this won't work for all our scripts, because in some cases we do want to permit POST.

View 2 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved