i have Suhosin installed on my server now some of my sites are facing problem i.e forums like ipb , vbulliten ,phpbb3 with the images on the forum are not displaying properly..
So is this problem related to the values of these two fields present in Suhosin
suhosin.post.max_value_length =
suhosin.request.max_value_length =
is Suhosin good for shared servers?
I am trying to create a phpbb3 forum that can hold like 100 members. I am looking for hosting that will support my forum, is a decent price, and if I don't have to lock in any months thats an added bonus.
View 11 Replies View RelatedI have found this forum through searching google for articles etc about the best/cheapest host for a small forum, and I think this is the best place to ask I have searched the many topics on this but none of them quite answer my question, so I apologise for repeating what may have already been done.
Anyway....
I currently use a free host (forumotion) and have become increasingly frustrated at not having total control over my forum, and not having access to the database.
I figure now will be a good time to move as the forum is only a couple of months old.
So what I am looking for is a basic hosting package including domain name, that can support phpbb version 3. Im looking for cheap and cheerful basically. I dont know enough about this kind of thing to elaborate, but here are my forum stats;
Number of posts 10781
Posts per day 121.13
Number of topics 625
Topics per day 7.02
Number of users 153
Users per day 1.72
Most users ever online 40
Stats generated on Tue Jul 08, 2008 2:31 am
Avatar directory size 1016.43 KB
As you can see it is pretty small.....it may grow over the next couple of years but has a shelf life of 2010 as that is when the TV show finishes (its a Lost forum), and it may continue for a while after that but I dont expect it to go on and on and on
We have a lot of media posted, mainly youtube vids and jpeg, and we also have a small aracde, so i'm guessing I would need a lot of room there? Plus we have newsletters that would need to be hosted as online versions but they are just html documents.
I hope I have given enough information....oh budget wise I am looking at cheapest possible as I dont want to start charging members to fund the hosting costs.
I am hosting my site on cpanel server, but there is a little problem, my images in the application are not getting displayed, whereas they are displaying alright on my local server, i've tried different methods to ressolve this issue, but, i wonder is it something to do with the server.
View 6 Replies View RelatedI have a java applet that displays (local)images. I also have anti leach code in .htaccess that is adde via cpanel:
.htaccess contents:
Code:
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^http://owndomain.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://owndomain.com$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.owndomain/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.owndomain.com$
RewriteRule .*.(jpg|jpeg|gif|png|bmp)$ - [F,NC]
Symptems:
1- Java Applet loads && runs ok but doesn't display images.
2- When .htaccess file is removed, images display ok.
PRODUCT, VERSION, MICROUPDATE, OPERATING SYSTEM, ARCHITECTURE
plesk parrells ,12.0.18 ,Update #26 ,centos 7 , 64 bit
PROBLEM DESCRIPTION
file in documenRoot folder eg httpdocs wont display properly
STEPS TO REPRODUCE
create a new sLTubscriptions , then ftp files into document root folder using filezilla
[Code] ....
The weird thing is when I put the files into a subdirectory (eg www.example.com/home /) the site itself shows correctly. But when I put the files back into the document root folder(eg httpdocs) it doesn't show correctly. Also no css or javascript error messages show up in the chrome debug window?
I installed suhosin successfully but most images in the website is not working it show red X box
this is the suhosin list from php info
This program makes use of the Zend Scripting Language Engine:
Zend Engine v1.3.0, Copyright (c) 1998-2004 Zend Technologies with the ionCube PHP Loader v3.1.32, Copyright (c) 2002-2007, by ionCube Ltd., and with Zend Extension Manager v1.2.0, Copyright (c) 2003-2007, by Zend Technologies with Suhosin v0.9.18, Copyright (c) 2002-2006, by Hardened-PHP Project with Zend Optimizer v3.2.2, Copyright (c) 1998-2006, by Zend Technologies
suhosin
This server is protected with the Suhosin Extension 0.9.18
Copyright (c) 2006 Hardened-PHP Project
Directive Local Value Master Value
suhosin.apc_bug_workaround Off Off
suhosin.cookie.checkraddr 0 0
suhosin.cookie.cryptdocroot On On
suhosin.cookie.cryptkey [ protected ] [ protected ]
suhosin.cookie.cryptlist no value no value
suhosin.cookie.cryptraddr 0 0
suhosin.cookie.cryptua On On
suhosin.cookie.disallow_nul 1 1
suhosin.cookie.encrypt Off Off
suhosin.cookie.max_array_depth 100 100
suhosin.cookie.max_array_index_length 64 64
suhosin.cookie.max_name_length 64 64
suhosin.cookie.max_totalname_length 256 256
suhosin.cookie.max_value_length 10000 10000
suhosin.cookie.max_vars 100 100
suhosin.cookie.plainlist no value no value
suhosin.coredump Off Off
suhosin.executor.allow_symlink Off Off
suhosin.executor.disable_emodifier Off Off
suhosin.executor.disable_eval Off Off
suhosin.executor.eval.blacklist no value no value
suhosin.executor.eval.whitelist no value no value
suhosin.executor.func.blacklist no value no value
suhosin.executor.func.whitelist no value no value
suhosin.executor.include.blacklist no value no value
suhosin.executor.include.max_traversal 0 0
suhosin.executor.include.whitelist no value no value
suhosin.executor.max_depth 0 0
suhosin.filter.action no value no value
suhosin.get.disallow_nul 1 1
suhosin.get.max_array_depth 50 50
suhosin.get.max_array_index_length 64 64
suhosin.get.max_name_length 64 64
suhosin.get.max_totalname_length 256 256
suhosin.get.max_value_length 512 512
suhosin.get.max_vars 100 100
suhosin.log.file 0 0
suhosin.log.file.name no value no value
suhosin.log.phpscript 0 0
suhosin.log.phpscript.is_safe Off Off
suhosin.log.phpscript.name no value no value
suhosin.log.sapi 0 0
suhosin.log.script 0 0
suhosin.log.script.name no value no value
suhosin.log.syslog no value no value
suhosin.log.syslog.facility no value no value
suhosin.log.syslog.priority no value no value
suhosin.log.use-x-forwarded-for Off Off
suhosin.mail.protect 0 0
suhosin.memory_limit 0 0
suhosin.multiheader Off Off
suhosin.post.disallow_nul 1 1
suhosin.post.max_array_depth 100 100
suhosin.post.max_array_index_length 64 64
suhosin.post.max_name_length 64 64
suhosin.post.max_totalname_length 256 256
suhosin.post.max_value_length 65000 65000
suhosin.post.max_vars 200 200
suhosin.protectkey On On
suhosin.request.disallow_nul 1 1
suhosin.request.max_array_depth 100 100
suhosin.request.max_array_index_length 64 64
suhosin.request.max_totalname_length 256 256
suhosin.request.max_value_length 65000 65000
suhosin.request.max_varname_length 64 64
suhosin.request.max_vars 200 200
suhosin.session.checkraddr 0 0
suhosin.session.cryptdocroot On On
suhosin.session.cryptkey [ protected ] [ protected ]
suhosin.session.cryptraddr 0 0
suhosin.session.cryptua On On
suhosin.session.encrypt On On
suhosin.session.max_id_length 128 128
suhosin.simulation Off Off
suhosin.sql.bailout_on_error Off Off
suhosin.sql.comment 0 0
suhosin.sql.multiselect 0 0
suhosin.sql.opencomment 0 0
suhosin.sql.union 0 0
suhosin.sql.user_postfix no value no value
suhosin.sql.user_prefix no value no value
suhosin.stealth On On
suhosin.upload.disallow_binary 0 0
suhosin.upload.disallow_elf 1 1
suhosin.upload.max_uploads 25 25
suhosin.upload.remove_binary 0 0
suhosin.upload.verification_script no value no value
How to hotlink images in forum?
View 2 Replies View RelatedWhat is the difference between Suhosin Extension and Suhosin Patch?
View 6 Replies View Relatedi wanna ask what do you think the most reliable host, all i want is stability, i am not caring alot about disc space and bandwidth.
my script is phpbb3
my budget don't allow me to buy VPS or dedicated, the only option for me now is shared hosting.
if you were me what company will you choose?
I am using Bluehost as my primary / public server and yes had my own horror stories with them.. But I am still with them since they sorted things out with me. Any way... Bluehost has a Cap Limit of you can send somewhat 50 - 500 mails ( I just called them and raised it to 500).
I run a phpbb3 forum and want to send monthly newsletters to my members, I have more then 500 people so how exactly can I send them newsletters ?
Is there any special script that you use or special software that I need to run that will automatically get the email list from the phpbb3 board and send the emails every hour or something ?
i switched my host and have done a database backup of my phpbb2 forum. the new host only has phpbb3 - the sql doesn't load because the database structure has changed. is there any tool online that can go through my sql to convert them for phpbb3 use?
View 4 Replies View Relatedbasically it has to do with supporting filenames(or urls) in non English (Arabic) encoding in apache webserver....
I'm assuming that its apache that needs to be configured for this, i can't think of anything else except encoding support on the o/s too.....
funny thing is, i can upload and download non Arabic file names through ftp, and ftp displays them correctly, but they can't be accessed through a webbrowser.....
hmmmm, actually firefox can access them, it screws up the file name into funny signs but actually displays the file, I.E can't access them at all....
So, how can I enable Arabic language support on my webserver?
to do a 301 redirect from domainA to domainB but continue displaying DomainA's url when someone goes through.
Right now I'm doing:
redirectMatch 301 ^(.*)$ [url]
redirectMatch permanent ^(.*)$ [url]
How do I accomplish this?
It's very dangerous to display Google ads on your website! ("adsense"). If they decide they don't like your website, for any reasons, for example political reasons (they told it to me), then instead of displaying their regular ads, and even instead of displaying a blank space instead - they display a frame with big "Action canceled" at the top of your website and your customers might think you went out of business or something like that (they are not displaying any relation to Google). They did it to my and my website, www.speedywhois.com (currently .net), look for yourself, read this post and especially the images attached (MSIE and MZFF) and especially if you're politically active as I am and support human rights and especially in China or Israel or criticize Google or the United States of America then you can find "Action canceled" frames on the top of your website too.
http://www.speedy.net/uri/blog/?p=84
I currently don't have a computer and I'm using public computers to connect to the internet (it costs) and when I noticed this "Action canceled" on the top of my website it was shabbat (weekend) but since this is a top security issue and I didn't want my customers to think I went bankrupt and stop using Speedy Whois, I removed google ads and put a warning to other webmasters too.
By the way I also asked them why they stopped displaying my ads for Speedy Whois on their websites ("adwords"), I wrote them in english and my website is english and my language preferences are english but instead they wrote me something in hebrew about them hating me and my website which I didn't even bother to read. I asked them to reply in english and they refused so I'm not advertising with them either. Godaddy is also not displaying whois data to my customers so they are together (Google & Godaddy) doing their best to cause my customers to stop using my website.
Google also caused me problems with sending mail from my gmail and they are censoring me big time because of my political views. I'm against wars and I wrote some things against war crimes on my website and it made them very angry about me.
I host my site on webcity and have done for 6-7months. Most of the time, I publish my web and the changes appear virtually immediately.
Some weeks ago, the lag between publishing and appearing began to take hours. I advised webcity support and the next day back to normal.
Yesterday, it started again. I emailed webcity and their reposnse was - it's your cache. I rang webcity and again was advised - it's your cache (or something your ISP is doing).
I don't believe it is cache. I can refresh the page, close the browser, reboot the computer, clear all temp files (run CC Cleaner) - no difference.
why starting from last 2 days everytime I visit my page on my Cpanel Server, it will prompted to download the file instead of displaying it.
My Cpanel info:
Operating system Linux
PHP version 5.2.5
cPanel Version 11.18.3-STABLE 21703
to display the server load average through HTTP. How may I do that?
Please note that I have all insecure functions disabled, such as exec, system, etc... But I have root access.
i installed the latest version of the mail scanner on my linux server. It has been tested to be scanning and running properly. But one thing that is unusual is that the emails that is being processed by the mailscanner does not get tagged as its being processed by it. Hence i do not really know whether it has been processed.
When i check the email full headers, i am missing information like spam score, spam information and spam status. I did a check in the mailscanner.conf and the configuration was done correctly.
how can we set these information to show on the email header that it has been processed.
I am thinking about installing the Suhosin option for PHP on some shared servers to improve PHP's security. Are there any gotchas I would need to be aware of? I've checked out the Suhosin site but there is not much there at all.
View 4 Replies View RelatedI've been testing out Suhosin Extension 0.9.29 from [url]
There are at least two areas (that I know of) where I need help.
1. Error messages go to /var/log/messages no matter what I set for suhosin.log.syslog.facility even though I have a corresponding /etc/syslog.conf facility going to /var/log/suhosin.log
If you have successfully set up suhosin to log outside of /var/log/messages, do you mind sharing your /etc/syslog.conf and php.ini settings for that change?
2. I am seeing a lot of "ALERT-SIMULATION - script tried to increase memory_limit to 4294967295 bytes which is above the allowed value (attacker 'REMOTE_ADDR not set', file 'unknown')" errors in /var/log/messages.
How can I find the IP and file involved?
For those that do include the increase memory_limit alert with an IP address and actual file, how can I determine if the activity is incorrect or correct and the suhosin memory limit needs to be increased?
For the shell script, awk/gawk, etc. experts, is there a way to consolidate the following messages into one line? ....
i have a dedicated server and i have installed suhosin through els
well
els never asked me for configurations or anything ,, it just installed it
any way
i'm trying to install AWBS on my server ,, AWBS needs safe_mode to be off
so i went (pico /usr/local/lib/php.ini)
all the lines were commented
suhosin added this to every line at the begining
PHP Code:
;suhosin.version=0.9.20
so everyline became commented
any way
i was trying to turn off the safe mode
so i searched for it and replaced On with Off
but the changes didn't take effect
(locate suhosin)
found bunch of folders and suhosin.so files that i couldn't manage
is installing this extension ,, replaces the php.ini effect with another one ???
how can i configure php.ini to turn off the safe mode and also disable some functions while suhosin is there
+
how to remove suhosin without losing any data
which command shall i use
with suhosin, with conf in php.ini. For get this working i must do a change in php.ini
extension_dir = "./"
FOR
extension_dir = ""
and get working, but for the next day this is changed again.
I have Suhosin on the server to patch PHP and I now cannot use the PHP include('blah.php')statement.
I have no whitelist or blacklist but still get the error:
"ALERT - Include filename ('<url>')is an URL that is not allowed"
and all I get is a blank page - is there a way of letting the URL includes work?
I am trying to do reverse proxy for several web servers in my network.I have successfully configure the reverse proxy.However , when website with multimedia webpages are requested , the multimedia content is not displaying. What is is that I am missing in my config file.
<VirtualHost *:80>
ServerAdmin webmaster@dummy-host.example.com
#DocumentRoot /www/docs/dummy-host.example.com
ServerName dummy-host.example.com
[Code].....
I was asked by a user why he only saw a page with 'related links' when he went to the web site. I checked and saw the same thing if I typed www.domain.tld. If I just typed domain.tld, the page displayed fine. In trying different things tonite, I cleared my cache and now neither url works.
I am using Parallels Plesk Panel 11.5.3. If I click the 'Preview' button on the panel, everything looks great. If I click the 'Open' button, I get the 'related links' page.Today, the shcnf.com link seems to be working fine and the 'Open' button in Parallels Plesk Panel works, but the www.shcnf.com link is still showing a 'related links' page.
My DNS settings show:
shcnf.com record type: A value: 198.144.188.31
www.shcnf.com record type: CNAME value: shcnf.com
I do not currently have a preferred domain set in my hosting settings. I tried setting one the other night with no luck, though I was also playing with the DNS settings (I tried setting www.shcnf.com to an A value with the IP, hoping to force it to work).
I run a FreeBSD box as my file and webserver I use a DynDns domain name and run the little update program. But anyway when ever I use my lappy and when ever my lappy makes an outgoing connection a login prompt comes up asking to connect to my domain. It used to just say my public IP but I edited hosts.rc so now it says my domain on the prompt.
Is this somthing to do with samba or apache on BSD or is windows detecting that I host my own or what.