How turn off allow_url_fopen and short_open_tag in PHP4/5 - module CGI?
I create php.ini in /home/myusername/public_html/php.ini and add command:
allow_url_fopen=0 (not working)
short_open_tag=0 (not working
allow_url_fopen=Off (not working)
short_open_tag=Off (not working)
First off my error: apache force downloads .php4 files
Background:
Im attempting to run php4 and php5 at the same time. I had php 5 installed with the server when I got it.
I have installed php 4 from the source like this:
Code:
./configure --with-apxs=/usr/local/apache/bin/apxs --prefix=/PHP4 --without-mysql
I then copied the php.ini file to /PHP4/php.ini
In my httpd.conf Im loading and adding both php 4/5 modules like so:
Code:
LoadModule php4_module libexec/libphp4.so
LoadModule php5_module libexec/libphp5.so
AddModule mod_php4.c
AddModule mod_php5.c
Then later in the httpd.conf Im trying to tell apache to handle .php4 files with PHP 4 and .php with PHP5
Code:
AddType application/x-httpd-php .php
AddType application/x-httpd-php4 .php4
I restarted apache to load the new conf. .php files still use PHP5, but for some reason .php4 files are being downloaded, not running with PHP 4.
If I use htaccess to application/x-httpd-php4 php, .php files also force download. What am I missing?
I wouldn't like to disable allow_url_fopen on my servers, because some scripts depends on that but it's getting very common to see scripts being abused because of this feature
any ideas on how to at least log its usage, so it's easier to detect who caused the exploitation (usually for SPAM or shell)? I though about a "=http://" mod_security filter
but maybe (I hope) there a better way
What are the advantages/disadvantages of running PHP as Apache module vs. running PHP as CGI module on your server?
View 5 Replies View RelatedWe have a client which site requires PHP4, not PHP5 to run. Can we run both PHP versions alongside each other? Apparently, their site will only work in PHP4. We are running Plesk 8.3.0 for Linux.
View 8 Replies View Relatedhow I could have both PHP4 and PHP5 work on a Win2003 server. Currently PHP5 is installed and works.
View 1 Replies View Relatedi am getting Internal Server Error while accessing php5 pages.
cat .htaccess
AddHandler application/x-httpd-php5 .php
Premature end of script headers: /usr/local/cpanel/cgi-sys/php5
We have a server runing both php4 + php5 and had someone set it up that way when we got the server. but now i cant find who did it for us. And would like to hear how to do it. Im not the best with this kind of stuff and thats why i hire someone to do it lasttime
I been reading on cpanel.net but nothing is up to date!
im still getting used to VPS and im a bit puzzled on how to select php 4 instead of running 5.
Plesk 8.3.0
Is there any difference in performance if you upgrade from php4 to php5? Or can it reduce the average server load?
View 12 Replies View RelatedI have a client who is currently running their own linux machine and has php4 installed (mad I know ) Anyways, I have been asked to make some scripts for them, however I am wanting to use php5 rather than php4 as that is what I am accustomed to not to mention it's still got support for it. Does anyone know of any good online resources on how to upgrade to php5? or better still, how to install php5 and run both 4 and 5 on the same server (using Apache)
View 5 Replies View Relatedin latest cPanel, there is option to compile both php4 & php5. by default .php page will be parsed by php5 and .php4 will be parsed by php4 engine.
but i want to reverse the method. by default .php should be parsed by php4 engine and .phpx or .php5 should be parsed by php5 engine.
how can I do this?
can't i install apache 2x while using both php4 & php5. cPanel did not recommend apache 2x with php4.
I have an application that runs on PHP4 but the server I have has PHP5.
The server has the following packages:
php-mbstring-5.0.4-10.5
php-5.0.4-10.5
php-mysql-5.0.4-10.5
php-gd-5.0.4-10.5
php-pear-5.0.4-10.5
php-ldap-5.0.4-10.5
I need to downgrade to the following packages so I can use the application:
php-mbstring-4.3.11-2.8
php-ldap-4.3.11-2.8
php-pear-4.3.11-2.8
php-gd-4.3.11-2.8
php-4.3.11-2.8
php-mysql-4.3.11-2.8
The papplication is not available for PHP5.
When I start uninstalling packages is giving the following errors:
[root@localhost ~]# rpm -e php-5.0.4-10.5
error: Failed dependencies:
php >= 4.0.4 is needed by (installed) squirrelmail-1.4.7-4.fc4.noarch
php = 5.0.4-10.5 is needed by (installed) php-pear-5.0.4-10.5.i386
php = 5.0.4-10.5 is needed by (installed) php-mysql-5.0.4-10.5.i386
php = 5.0.4-10.5 is needed by (installed) php-mbstring-5.0.4-10.5.i386
What will be the best way to downgrade these packages?
Is it possible/advsisable to run them both on a Cpanel Server?
View 3 Replies View RelatedUsing zencart, can't get https to work with paypal express. https and PHP work otherwise. Have gone through troubleshooting with zencart and the configuration between the cart and paypal is okay. However, openssl does not appear to be configured in libcurl based on phpinfo-
(curl
CURL supportenabled
CURL Informationlibcurl/7.16.4 zlib/1.2.3)
which is strange because, after a clean install of libcurl, curl shows this-
(curl 7.16.4 (powerpc-apple-darwin8.10.1) libcurl/7.16.4 OpenSSL/0.9.7l zlib/1.2.3
Protocols: tftp ftp telnet dict ldap http file https ftps
Features: IPv6 Largefile NTLM SSL libz)
The setup includes MacOSX 10.4.10 Tiger on a Mac G4, PHP 4.4.7, MySql 4.1.22. PHP was also rebuilt from scratch, before libcurl, because configure was missing on the original OSX installation, and was downloaded from PHP.net. The new libcurl was built to include openssl.
I start with a clean configure and makefile on each build. The last configure looked like this: './configure' '--prefix=/usr' '--with-zlib' '--with-xml' '--with-zlib-dir=/usr' '--with-openssl' '--enable-exif' '--enable-ftp' '--enable-mbstring' '--enable-mbregex' '--with-mysql=/usr' '--with-mysql-sock=/var/mysql/mysql.sock' '--enable-sockets' '--enable-dbx' '--with-curl=/usr' '--with-config-file-path=/etc' '--sysconfdir=/private/etc' '--without-pear' '--with-gd' '--with-jpeg-dir=/opt/local' '--with-png-dir=/opt/local' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--disable-dependency-tracking' '--with-apxs' '--with-ldap=/usr' '--with-kerberos=/usr' '--enable-cli' '--enable-trans-sid'
Both configure and build get through although there are warning messages, and the PHP module installs. Am attaching copies of the zipped configure and make logfiles rather than listing the many warnings in both, although build log primarily shows these type of errors in several extensions:
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c: In function 'add_assoc_name_entry':
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:246: warning: pointer targets in passing argument 2 of 'add_next_index_stringl' differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:258: warning: pointer targets in passing argument 4 of 'add_assoc_stringl_ex' differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c: In function 'add_assoc_asn1_string':
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:267: warning: pointer targets in passing argument 4 of 'add_assoc_stringl_ex' differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c: In function 'asn1_time_to_time_t':
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:290: warning: pointer targets in passing argument 1 of '_estrdup' differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c: In function 'zif_openssl_x509_parse':
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:897: warning: pointer targets in assignment differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c: In function 'php_openssl_make_REQ':
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:1207: warning: pointer targets in passing argument 3 of 'zend_hash_get_current_key_ex' differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:1207: warning: pointer targets in passing argument 4 of 'zend_hash_get_current_key_ex' differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:1280: warning: pointer targets in passing argument 3 of 'zend_hash_get_current_key_ex' differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:1280: warning: pointer targets in passing argument 4 of 'zend_hash_get_current_key_ex' differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c: In function 'zif_openssl_pkey_export_to_file':
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:1959: warning: pointer targets in passing argument 4 of 'PEM_write_bio_PrivateKey' differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c: In function 'zif_openssl_pkey_export':
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:2010: warning: pointer targets in passing argument 4 of 'PEM_write_bio_PrivateKey' differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c: In function 'zif_openssl_private_encrypt':
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:2520: warning: pointer targets in passing argument 2 of 'RSA_private_encrypt' differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:2529: warning: pointer targets in initialization differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c: In function 'zif_openssl_private_decrypt':
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:2576: warning: pointer targets in passing argument 2 of 'RSA_private_decrypt' differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:2592: warning: pointer targets in initialization differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c: In function 'zif_openssl_public_encrypt':
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:2639: warning: pointer targets in passing argument 2 of 'RSA_public_encrypt' differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:2649: warning: pointer targets in initialization differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c: In function 'zif_openssl_public_decrypt':
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:2696: warning: pointer targets in passing argument 2 of 'RSA_public_decrypt' differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:2714: warning: pointer targets in initialization differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c: In function 'zif_openssl_sign':
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:2775: warning: pointer targets in passing argument 3 of 'EVP_SignFinal' differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:2778: warning: pointer targets in initialization differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c: In function 'zif_openssl_verify':
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:2813: warning: pointer targets in passing argument 2 of 'EVP_VerifyFinal' differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c: In function 'zif_openssl_seal':
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:2888: warning: pointer targets in passing argument 4 of 'EVP_EncryptUpdate' differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:2907: warning: pointer targets in initialization differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c: In function 'zif_openssl_open':
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:2975: warning: pointer targets in passing argument 3 of 'EVP_OpenInit' differ in signedness
/users/mea/Desktop/stufftobuild/php-4.4.7/ext/openssl/openssl.c:2977: warning: pointer targets in passing argument 4 of 'EVP_DecryptUpdate' differ in signedness
From what I know the best option would be to get PHP, curl and ssl to work on the current platform. Any ideas on what could be going on and what it would take to get this to work?
My server currently has php 4.4.7 installed. I was wondering what potential issues (if any) there might be upgrading to 5.2.9?
Is there anything that might break code written for php4? (other than predefined functions with identical names)
I'm wondering if anyone here has successfully used PHP 4 and 5 on CentOS 5 with cPanel.
I believe the OS does not have official RPMs for PHP4. Would I run into any problems if I use 3rd party RPMs?
[url]
I know it can be done, I'm just looking for any insight from someone who has tried it.
I have suPHP installed in FastCGI mode. PHP5 is my default installation but I have it setup so that PHP4 can also run. At least that is my intention.
I have PHP5 working without a problem.
PHP4 is loading if I add the directinf x-httpd-php4 .php into my .htaccess file.
HOWEVER: PHP (via phpinfo) is trying to load the config file from /usr/local/etc/php5/cgi/php.ini when it should be from ....php4/cgi/php.ini
Where do I go to fix this? Or is there a second directive that I need to load in the .htaccess file?
Also... In either php5 or php4, if I put a php.ini file into a directory, it is suppose to load that one. However, it is not doing this either.
1) Download PHP 5.x and do the usual
cd /usr/local/src
[url]
2) Compile php as in a new directory such as /usr/local/php5
Use the same ./configure line required but with the following changes:
--prefix=/usr/local/php5 --exec-prefix=/usr/local/php5 --program-suffix=5 --enable-force-cgi-redirect --enable-discard-path
3) Compile and install
make
make install
IMP Steps :
cp php.ini-dist /usr/local/php5/lib/php.ini
cp /usr/local/php5/bin/php5 /usr/local/cpanel/cgi-sys/php5
chown root:wheel /usr/local/cpanel/cgi-sys/php5
4) Edit httpd.conf and add lines below::
AddHandler application/x-http-php5 .php5
Action application/x-http-php5 /cgi-sys/php5
Just use .php5 and it will invoke php5.
# CGI configuration for PHP4
Action application/x-httpd-php4 /cgi-sys/php4
AddType application/x-httpd-php4 .php4 .php .php3 .php2 .phtml
# LibPHP5 configuration
LoadModule php5_module modules/libphp5.so
AddType application/x-httpd-php .php5
How to upgrade php4 to php5 on CentOS 4.6?
View 4 Replies View RelatedI currently have PHP 4.3.11 installed on my CentOS box and would also like to have PHP 5 installed for users to enable on their domains if they wish. I know GoDaddy offers their customers the option to enable PHP 5 parsing by tweaking the htaccess file in their root directories a tad. See their knowledgebase article: [url]
I would like to do something similar but before doing so would like to know if this is even worth doing and if so, what advantages it would offer our customers who program. Do scripts written in php4x work on php5 servers? Is it to the point now where web hosts should be phasing out php4 in lieu of php5? Are there any guides for accomplishing this that might help me out?
running to Apache 2 servers and proxying one to the other isn't the way I would like to do this.
I am on a softlayer server with centos 4.x installed. I have a custom php 4.4.6 installed along with eaccelerator 0.95. This is what I need:
PHP 5 with:
zlib
jpeg
mysql
freetype
gd
my current configure string is:
'./configure'
'--with-apxs2=/usr/sbin/apxs'
'--with-mysql'
'--enable-wddx'
'--with-ldap=shared'
'--with-mysql--enable-memory-limit'
'--enable-shmop'
'--enable-calendar'
'--enable-dbx'
'--enable-dio'
'--enable-mbstring'
'--with-zlib'
'--enable-exif'
'--with-gd=/usr/local'
I want to update to PHP5, but I want to make sure I have all the extras I need. I'm also worried that if I install PHP5 that eaccelerator will break. Will that need to be reinstalled?
Could someone walk me through this procedure? I can ask SoftLayer to upgrade PHP5, but I doubt they will touch eaccelerator.
I only know basic commands for SSH and have been trying for hours to get GD installed for PHP4. I have tried:
# apt-get install php-gd
bash: apt-get: command not found
apt-get install php4-gd
bash: apt-get: command not found
# up2date -i php-gd
Fetching Obsoletes list for channel: rhel-i386-es-4...
Fetching Obsoletes list for channel: rhel-i386-es-4-extras...
Fetching rpm headers...
Name Version Rel
----------------------------------------------------------
The following Packages were marked to be skipped by your configuration:
Name Version Rel Reason
-------------------------------------------------------------------------------
kernel 2.6.9 55.0.2.ELPkg name/pattern
kernel-devel 2.6.9 55.0.2.ELPkg name/pattern
kernel-hugemem-devel 2.6.9 55.0.2.ELPkg name/pattern
kernel-smp 2.6.9 55.0.2.ELPkg name/pattern
kernel-smp-devel 2.6.9 55.0.2.ELPkg name/pattern
php-gd 4.3.9 3.22.5Pkg name/pattern
The following packages you requested were marked to be skipped by your configuration:
php-gd
None of these things work and I was wondering if anyone knew how to get this to work without recompiling PHP.
I have an apache2/php5/mysql5 setup working fine.
I need to install php4 alongside php5. In the tutorials section i saw methods for people who already have php4 installed but not php5. I need to do this the other way around,
Server :
pentium IV 3.0 Ghz
debian 3.1
kernel 2.6
apache2
php4.3.10
Some months ago I installed php4 on this server , and added eaccelerator.net , mostly with this site as guide. Everything worked fine.
Few days ago I realize I hadn't updated this server for a while. I run 'apt-get update' and 'apt-get dist-upgrade' . A whole lot of things get updated, and after that I perform a reboot, as adviced by the update script.
The next day I experiment a bit with the profiler of xdebug . I manage to install it , play around with the results, but decide to uncomment it from php.ini again as it is not that helpfull to me and it makes quiet big log files too.
Today I notice this server is getting very big loads. Normally on peak evenings it would float around 2-4 , with sometime jumps to 10-12 but always quickly recovering and working well. But on this evening it kept rising, stayed around 30-60 for most of the time, and even hit up to 85 . It only lowers when the busy hours are really over. So I look around everywhere , and then after a few hours I notice that eaccelerator is not visible in phpinfo(); anymore. This is the only weird thing I could find, and I assume this caused a big difference on the performance.
I dont know why exactly it went away. Maybe it was the server update, wich touched a lot of files. But I thought it was not supposed to update any configuration files, not without warning at least. I could also have been the xdebug script, wich also uses 'phpize' to install and also required editing in php.ini . I really wish I noticed the lack of eaccelerator after the update but before trying xdebug.
So I try to install eaccelerator again. Unpack from source, phpize, make, etc etc, just as last time. I edit php.ini to make sure the load command and settings of eaccelerator are still there and reload apache. I check phpinfo(); , but nothing changes. I try it all again to be sure, but still nothing. I check the location of the .so files, yes they are still there and the rights of the files look ok.
I edit php.ini again and uncomment 'extension=mysql.so', and reload apache. I notice a mysql error on my site as expected. So that means I'm really editing the right php.ini file and that I can influence the extensions that are loaded. I add the mysql extension again and reload apache.
I load an old php.ini backup file, from right after first installation of this server. The eaccelerator settings are there too already, but if I try it and reload apache : no difference.
I reboot my server again, because .. well sometimes it helps. But not with this. phpinfo(); still says no eaccelerator.
I check another server, exact same specs, same php+eaccelerator installation on the same day as the first one. I compare versions of apache/php/php extensions/zend extensions and all numbers I can find. Everything still looks the same, except server 1 does not have eaccelerator and server 2 still has.
I'm shomehow out of things to check now. I'm pretty sure eaccelerator has a big influence on the performance of my heavy php site, and I want it back. Everything looks ok, the files are there, the settings in php.ini are there, it should work ... but it doesnt. No errors or warnings anywhere, just phpinfo(); saying that eaccelerator has not been loaded and the high loads are confirming this.
It will either be a very complicated solution, or a very simple one, but I'm just looking over it. Does anyone has any tips on where to look or what to try ? Thanks.
I already have PHP 4 installed on my server and now i want to install php5 on same apache instance but different port.I want to configure the system so that on one port php4 runa dn on second port PHP5 run.
View 1 Replies View RelatedCentOS - I had php4 running and php5 as cgi but then decided I wanted to have it the other way around i.e. run php5 standard and php4 as cgi.
php5 is now running fine but php4 bombed with this error:
Code:
Unexpected character in input: '?' (ASCII=15) state=1 in /usr/local/cpanel/cgi-sys/php4
I fixed it by doing the following:
EDIT php.ini file:
Normally in /usr/local/php4/lib/php.ini
Under
;;;;;;;;;;;;;;;;;;;;;;;;;
; Paths and Directories ;
;;;;;;;;;;;;;;;;;;;;;;;;;
UNCOMMENT this line
Code:
;cgi.fix_pathinfo=0
(i.e. remove the ";" infront)
and
CHANGE 0 to 1:
Code:
cgi.fix_pathinfo=1
This is for Linux and must be done with root via SSH
Not sure if this will help anyone, but I thought I'd post it anyway.
The problem appeared from register globals, in the shop oscommerce after the actualization PHP to the version 4.4.5 information appears me: FATAL ERROR: register_globals is disabled in php.ini, please enable it! and if I add: php_flag register_globals On to the file .htaccess this: one can not display page.
View 1 Replies View Relatedhow to turn off f-cgi?
Its causing big problem at my friend's site, it often leads to 500, 501 and 502 pages, earlier some one mentioned even fcgi could be reason for the error pages as it might show error page if php file takes longer time to load,
so I would like to to turn off fcgi at his site, he uses hypervm-lxadmin, I couldn't find an option when I searched, may be I have missed it, can u guide me through how to solve this issue
and I would like to know if turning off f-cgi will it cause any problem to the site, such as tech, issue to be fixed
How can I turn off open_basedir completely from within .htaccess?
I'm finding conflicting advice on how this can be done, or even if it can.
I have a pentium4 2.8 HT server.
However, HT was turned off at some point due to various reasons ( not by me).
how to turn HT back on in SSH?
