I want to include script wpisz.php from /srv/www/vhosts/default/htdocs into /srv/www/vhosts/domena.pl/httpdocs/, but i recive this error:
Code:
Warning: main() [function.main]: open_basedir restriction in effect. File(/srv/www/vhosts/domena.pl/httpdocs/wpisz.php) is not within the allowed path(s): (/srv/www/vhosts/default/htdocs:/tmp) in /srv/www/vhosts/default/htdocs/index.php on line 3
Warning: main(/srv/www/vhosts/domena.pl/httpdocs/wpisz.php) [function.main]: failed to open stream: Operation not permitted in /srv/www/vhosts/default/htdocs/index.php on line 3
Warning: main() [function.include]: Failed opening '/srv/www/vhosts/domena.pl/httpdocs/wpisz.php' for inclusion (include_path='.:/usr/share/php') in /srv/www/vhosts/default/htdocs/index.php on line 3
So, I ask you to help me to set it up (propably open_basedir) in that way in which will it work fine. But please.. use a simple language and describe the solution step-by-step because I'm not doing well whith this..
I've just upgraded my apache install to Apache 2.0.59 and PHP 4.4.6 and suddenly open_basedir has stopped working. I have an open_basedir setting in each vhost configuration that used to work fine on php 4.3.9, now upgraded it thinks there is no path specified and I'm getting the usual failures where my scripts are not allowed to write to a directory.
Has anyone else seen this or knows what's happening? I'm on 64-bit Centos 4.4
Assuming that an account on my server is hacked into, is open_basedir enough to protect other users on the same server? I would assume so, since php would not have access to those other accounts? Why is suphp needed?
Ofcourse, I also disabled dynamic loading of modules (apache) and added some disable_functions list.
when I make open_basedir effect in whm > security center
I have in my script this problem :
Warning: tempnam() [function.tempnam]: open_basedir restriction in effect. File() is not within the allowed path(s): (/home/xxxx/:/usr/lib/php:/usr/local/lib/php:/tmp) in /admincp/misc.php on line 685Warning: fwrite(): supplied argument is not a valid stream resource in /admincp/misc.php on line 688Warning: fclose(): supplied argument is not a valid stream resource in /admincp/misc.php on line 689
when I disable it I have this other one problem :
Warning: fopen() [function.fopen]: SAFE MODE Restriction in effect. The script whose uid is 32010 is not allowed to access /tmp/vbthumbLTfVOk owned by uid ..
I can't correct configure the open_basedir. Safe_mode on server is enabled. Now path to accounts is: /var/www/webx/ . I would like change this path to /webx/ On server are some accounts. How can I do it?
What I did:
-> I set path in php.ini file (/etc/php4/apache2) in open_basedir = line to: /webx/ and /var/www/webx/ too. Without effect.
-> I added <Directory /webx/> php_admin_value open_basedir /webx/ </Directory>
in /etc/apache2/apach2.conf and /etc/apache2/confixx_mhost.conf
Without effect.
After any change I was restarting the apache service through /etc/init.d/apache2 restart, of course.
About the 29th of last month my crons quit working properly, they are still ran but they did nothing.. I finally found out that its giving me an open_basedir error...
I am trying to run the crons from /home/<user>/crons/... The first few lines of the PHP Code includes some required files that are used by the rest of the site...
However, when the cron is ran I get the following email...
Quote:
X-Powered-By: PHP/5.2.1 Content-type: text/html
Warning: include() [function.include]: open_basedir restriction in effect. File(/home/<user>/public_html/includes/common.php) is not within the allowed path(s): (0) in /home/<user>/public_html/live.php on line 7
Warning: include(/home/<user>/public_html/includes/common.php) [function.include]: failed to open stream: Operation not permitted in /home/<user>/public_html/live.php on line 7
Warning: include() [function.include]: Failed opening '/home/<user>/public_html/includes/common.php' for inclusion (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/<user>/public_html/live.php on line 7 test Notice: Undefined variable: db in /home/<user>/public_html/live.php on line 11
Fatal error: Call to a member function query() on a non-object in /home/<user>/public_html/live.php on line 11
WHM 11.11.0 cPanel 11.15.0-R17665 CENTOS Enterprise 4.5 i686 on standard - WHM X v3.1.0 Apache version1.3.39 (Unix) PHP version5.2.1 MySQL version4.1.22-standard
(Paths have the correct username, I replaced the usernames with <user>...)
I am going to run a free host, yes I know I should post this in FWHT but well, they dont answer very fast if at all.
It is very dangerous to have Safe Mode OFF on a free host, but someone was telling me about open_basedir, which makes it so they cant touch any files set outside of open_basedir. Would this be suffiecient to keep them from touching others files? I know I need to disable other functions like exec() and stuff but would open_basedir keep hackers away from others files and hacking them...
if i enable PHP open_basedir Tweak in cpanel, it disables all sites and none load, do note that the other tweak called Apache mod_userdir Tweak is also enabled.
Now i am wondering is if they both clash with each other to compete for the security ?
Anyone else noticed this also?
Info : WHM 11.15.0 cPanel 11.18.6-S24255 CENTOS Enterprise 5 i686 on standard - WHM X v3.1.0
Is there a way to configure the open_basedir to allow cURL to FOLLOW_LOCATION? I'd like to keep the open_basedir enabled for security but at the same time, I need my site to function properly and that's not a possibility with FOLLOW_LOCATION not working.
I am trying to use chdir() in one of my scripts. However, I am getting an open_basedir restriction error. I have checked the php.ini and the value is not set (which as I understand should disable open_basedir).
I've installed CRE Loaded 6.2 on one of my client accounts and am receiving the following error when trying to edit the language files:
Warning: tempnam(): open_basedir restriction in effect. File() is not within the allowed path(s): (/hsphere/local/home/hrtire:/tmp:/var/tmp:/usr/local/lib/php) in /hsphere/local/home/hrtire/hrtire.net/store/admin/edit_textdata.php on line 151
I've asked for support from my host and they told me that it can be fixed using .htaccess. They said to use:
That doesn't fix the problem and I'm not getting any more responses from them. I've tried variations (e.g. .../store/, .../store/tmp/) and nothing works.
i check my site on checkdns.com and its show me this Error Report
CheckDNS.NET is verifying if NS are alive[url] NS list mismatch: registration authority reports that domain is hosted on the following servers: 'ns.sitename.com; ns1.sitename.com', but DNS server ns.sitename.com reports domain to be hosted on 'ns.sitename.com'. Please make sure that you configure the same DNS servers in registrar database and on your DNS
A lot of domains are running more then one NameServer, but I could not find any tutorial on how to "clone" the NS from one to an other. Is it enough to just add some kind of "transfer to IP setting" in bind, or do I have to have scripts that download settings and files from one server to an other regularly?
On my server I'd like to keep sites as fast as possible and not drain too much on the server. I don't have many users, but I'd like to get it right the first time. What's the best DB engine to use? What about other settings? I'm not sure I should run caching yet, I'm not under much load.
how come I can't route all traffic through openvpn.
1. I was able to ping my client and server ip no problem. So the tunnel connection is fine.
The problem is i can't route internet traffic through openvpn.
I was able to ping from tun0 interface after i add below command iptables -t nat -A PREROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
root@host188 [/etc/openvpn/config]# ping -I tun0 4.2.2.2 PING 4.2.2.2 (4.2.2.2) from 10.8.0.1 tun0: 56(84) bytes of data. 64 bytes from 4.2.2.2: icmp_seq=1 ttl=55 time=8.94 ms 64 bytes from 4.2.2.2: icmp_seq=2 ttl=55 time=8.65 ms 64 bytes from 4.2.2.2: icmp_seq=3 ttl=55 time=8.90 ms
However, my client can't ping 4.2.2.2 from vpn tunnel and I use tcpdump I saw the traffic coming.
downloaded WAMP5_1.7.0. Prior to downloading I was freaking out wondering if I was going to screw up my computer with software conflicts, but I pressed on. I read the Apache information regarding IIS / Apache conflicts. The tutiorial told me to check the services installed on my computer. The tutorial told me to look for a service titled "World Wide Publishing" The service (WWP) did not exist so I proceeded to the WAMP installation wizard. I installed it. Apache does not display in the services window. As if it does not exist. Apache will not fire up. From what I got from the instructions at Apache, it seems there are alot of modifications I can perform to setup Apache correctly. The long and short of it is I connot see my see what my HTML/PHP code is spitting out because Apache never fires up. Can anyone give me some pointers on setting WAMP up in plain ENGISH? Just a note, when I float my mouse over the Apache icon, a little mouse over windows comes up saying "one of two servers running". Is ISS enabled on my computer? I'm frustrated. Any help regarding this matter is worth a beer (or 12).
I purshased a web hosting and I uploaded just one folder to it with my email contact form. The fact is that Google is already listing my site but it is showing the full content of my HTML public folder! Everyone could search my site like an FTP! I don't really want that. How can I avoid that? I just want web browsers to show my web pages, not the folders neither my HTML public folder with all my files: scripts, photos, etc.
Google is showing all this:
Index of /[DIR] Parent Directory 15-Jan-2007 07:58 - [DIR] cgi-bin/ 15-Jan-2007 02:37 -. Apache/1.3.37
Maybe the solution is too easy but for me it is a nightmare right now.
Between our Linux servers, I can get speed up to 80Mbps when transferring big files. However, between Linux and Windows, it's just around 800Kbps - 2Mbps. It shows in network connection properties that connected at 100Mbps, but not sure why it's so slow
Is there any setting I should pay attention? Running Windows 2003 on that box.
This is a instructional overview thread for those developers who are getting into setting up their own server with a LAMP (Linux Apache MySQL PHP) setup. The linux distro referred to in this thread is a centOS (fedora|redhat) setup.
Before Anything
- Make sure that your actual RAM is the same amount that is displayed by the server (there could be some BIOS restrictions on RAM so check for that).
Linux OS Installation
- Use a server system for the type of install. ------------------------------ - Setup you partitions with care: - Make sure that everything other than /swap is an ext3 partition type. - /swap (usually double the amount of space that your ram has but never larger than 4 gigs. - /tmp (700meg is ok). - /boot (100meg is ok). - / (leave rest of the available space in the harddrive for this). ------------------------------ - Use GRUB boot loader - Use DCHP only if your IP address changes due to the network. If not, then assign the IP address of the box. - Assign the netmask if DCHP is not in use. ------------------------------ - When setting up the packages, select only what you need. Most of the time it's better to just install no packages and then install everything you need by yum (yellowdog update manager). If you do not select any packages, only the 1st CD of the linux install will be needed.
Linux OS Customizing
- Create a new user and provide it a password (with # passwd). Do not create a user with a generic or commonly known names used in any daemon programs (ex. mysql, apache, admin, user, php, postgresql). - Disable the ROOT login in SSH (this means that when you login using the other user with SSH, you'll have to $ su to the root user). - Install "Development Tools" with yum using group install if you plan to compile your own apache. If not then install apache with yum install apache.
Apache Settings
- Disable the extensions that you're not using for your website. If the server is only hosting one website, then there is no use for Virtual Hosts. - Set the ServerLimit value to a suitable value so that users won't get locked out of the website. - Change the User and Group directives to the newly created user. - Set Options +Indexes to Options -Indexes so that the contents of directories w/o an index file will not be displayed. - Change the DocumentRoot setting to the newly created user's home (~) directory. Or if you plan to use the default (/var/www/htdocs or /var/www/html) then assign the permissions of the user to that directory. - Add apache as a start up program when the operating system boots up (this can be set in /etc/rc.d/local). - Setup logs accordingly. If you setup image logging and your server has 20+ images per page then your website performance can suffer. - Setup Error Logs to a suitable level. - If any web pages are not displaying and the web server appears to be on when accessing it from the localhost (wget http://localhost) then disable or flush the iptables (/usr/sbin/iptables --fliush). You should also set this as a start up option for the OS. - Use mod_rewrite to use modern URLs.
MySQL Settings
- Use --skip-name-resolve. - Use --skip-bdb (if you're not using it). - Use --skip-innodb (if you're not using it). - Set a log for slow queries. - Set the max_connections to a high value. - Do not set a user with a wildcard ip-address. Only setup users with a specific ip. - Use Query Caching for frequently used queries.
PHP Settings
- Disable Magic Quotes. - Disable Register Globals. - Disable Short Tags. - Disable ERROR REPORTING if the website is not in development mode. - Enable HTTP Only Session Cookies. - Set Session Cookies to only be cookies (and not URL's). - If sessions do not work, then set the session save path to a directory where the apache user has access to. - Use Gzip Compression.
Optimizing Concepts
- Use an optcode cache for PHP (Eaccelerator). - Consider using a static domain for CSS and JS files (this way the same cookies for the website won't be sent on each request). - If your website uses alot of CSS and JS files per page, bundle all of them together into one request using mod_rewrite and php [url] - For Apache, use the lingerD module (this reduces the amount of resources that are used when an apache connection is closed).
Here are some links for optimizing your server build:
I am running IIS 6 for testing & developing web sites offline before uploading the.But i am having little problem reagarding name server and how to configure sub-domain in name server,
I have 2 servers, 1 has its DNS sorted out, and I have a domain on it. The other is an unmanned dedicated server. I need to configure plesk, and I understand it needs a valid DNS to function.
What I want from the second server is simply for its pages, content etc to be accessed via the IP address, not a domain, as it is purely a media server. So how can I configure this? I created a virtual domain but the plesk server shows the default folder content and not the virtually created one, how can I get the server to point to my virtually created folder content?
when i set the Backup Destination to ( /home/cpbackup/daily/) this error appear to me
Quotas cannot be built! Your cpbackup destination is on a filesystem which has quotas enabled. Please move it to a filesystem which does not have quotas turned on or a separate partition/disk slice mounted at /backup.Backup has been disabled to prevent quota problems...
