Tracking Forums, Newsgroups, Maling Lists
Home Scripts Tutorials Tracker Forums
  Advanced Search
  HOME    TRACKER    Web Hosting


Advertisements:




SuperbHosting.net & Arvixe.com have generously sponsored dedicated servers and web hosting to ensure a reliable and scalable dedicated hosting solution for BigResource.com.







SuPHP Or EAccelerator


I have a Linux server for shared hosting in which I am using Cpanel/WHM. I have PHP running as suPHP which I believe is for security. The problem I am facing is a lot of PHP based websites create load on the server and consume as much as 10% of the CPU and sometimes some script even consumes 50% CPU. I think I can reduce the load caused by the PHP scripts by installing eAccelerator. However, it does not work with PHP running as suPHP. Can anybody tell me which one should I choose of the both? Is there any other way to reduce the load on the server?


View Complete Thread with Replies

Sponsored Links:

Related Forum Messages:
Eaccelerator Eaccelerator.shm_ttl
Does anyone have a recommendation for the eaccelerator eaccelerator.shm_ttl setting? If it was left at the default of "0", this means no newer scripts would ever be cached once the memory is full. Or would it do additional caching on disk as well and not show up in the phpino.php file?

We have alloted 32 Megs of Ram for eA. Maybe something like this would help move some old scripts out of the cache?

eaccelerator.shm_ttl="86400"
eaccelerator.shm_prune_period="0"

View Replies!   View Related
Eaccelerator
When eAccelerator doesn't have enough free shared memory to cache a new script it will remove all scripts from shared memory cache that haven't been accessed in at least shm_ttl seconds. By default this value is set to "0" which means that eAccelerator won't try to remove any old scripts from shared memory.

Does that mean that once the shared memory is full, that even if a script that is in shared memory hasn't been accessed in 5 months, any new scripts will have to be ran off of the compiled versions on disk instead of being read out of the much-faster RAM?

View Replies!   View Related
EAccelerator
i installed eAccelerator, everything look good, exept i have a problem with Wifidog-auth server that i have installed, it gives me errors that it cant connect to database.... but not all the times, could eaccelarator be doing this? it was fine before i installed EA

Fatal error: Uncaught exception 'Exception' with message 'Unable to connect to database on localhost' in /home/lavals/public_html/auth1/wifidog-auth/wifidog/classes/AbstractDb.php:96 Stack trace: #0 /home/lavals/public_html/auth1/wifidog-auth/wifidog/classes/AbstractDb.php(321): AbstractDb->connect(NULL) #1 /home/lavals/public_html/auth1/wifidog-auth/wifidog/classes/Server.php(227): AbstractDb->execSqlUniqueRes('SELECT server_i...', NULL, false, true) #2 /home/lavals/public_html/auth1/wifidog-auth/wifidog/include/common.php(107): Server::getCurrentServer(true) #3 /home/lavals/public_html/auth1/wifidog-auth/wifidog/hotspot_status.php(53): require_once('/home/lavals/pu...') #4 {main} thrown in /home/lavals/public_html/auth1/wifidog-auth/wifidog/classes/AbstractDb.php on line 96

View Replies!   View Related
EAccelerator And PHP 5.2.5
It seems that eAccelerator 0.9.5.2 is incompatible with the latest PHP 5.2.5.

Any else can confirm this?

View Replies!   View Related
Suphp
I use "suphp" on 3 servers I own with apache 2.2.6 and suddenly yesterday (15 hours ago) one of the servers show "Internal server error" on all sites.

Tried rebuilding apache and php 4 times with no fix until I came to try handling php with cgi instead. (I always like to track who is using apache processes)

well. getting to this fix was after 10 hours of all sites not working on the server.

now (5 minutes ago) I go to http://www.suphp.org to read their docs for solution to find this

Quote:

Internal Server Error

The server encountered an internal error or misconfiguration and was unable to complete your request.

Please contact the server administrator, hostmaster@marsching.com and inform them of the time the error occurred, and anything you might have done that may have caused the error.

More information about this error may be available in the server error log.
Apache Server at www.suphp.org Port 80

Why did this suddenly arise while No changes were done on server software or config?

I believe this happens after the first coming apache restart or something but dunno what was the reason yet

maybe suphp.org guys have to update us when their site comes back online

View Replies!   View Related
APC Vs EAccelerator Vs XCache
if anyone has run any tests or if there is a way to tell one of the other. I would like benchmark test them, just not sure how.

View Replies!   View Related
Installing EAccelerator
I successfully installed eAccelerator and its already working fine then I decided to update my PHP version which is 5.1.6 to 5.2.6 after the upgrade eAccelerator is no longer loaded I tried recompiling eAccelerator but to no avail it doesnt load anymore I double checked eaccelerator.ini and it was already set. Someone said that the phpize that was installed in my server is not compatible to PHP5.2.6 and it needs to be updated also but I cant seem to update it since it always says that it is already updated.

I am using CentOS5.3.

View Replies!   View Related
Install EAccelerator
I've got a CentOS 5.0 machine running PHP 4 & 5 in FastCGI mode with suPHP.

I've read the instructions to install eAccelerator at: InstallFromSource - eAccelerator - Trac

However there is a line at the beginning that says it is safe to follow those directions if you have ONE php install.

I have php5 as default and php4 optional. Does this count as 1 or 2 installs?

View Replies!   View Related
Xcache Or Eaccelerator?
What do you think is better Xcache or eAccelerator and why?

I can see that xcache is a little bit faster but what is better to use?

View Replies!   View Related
Xcache Or Eaccelerator
I have a server and I have several proxies on it together with some of my websites.
The thing is sometime it will overload.

I was thinking to install xcache or eaccelerator.

which should I install? Which is better?

View Replies!   View Related
EAccelerator FC2 Install
running php5 on FC2 server and wish to install eAccelerator, if i do 'yum info eaccelerator' it shows following as available.

Quote:

Looking in Available Packages:

Name : php-eaccelerator
Arch : i386
Version: 4.3.11_0.9.3
Release: 4.1.fc2.rf
Size : 231.11 kB
Group : Development/Languages
Repo : Dag RPM Repository for Fedora Core 2

This seems out of date?

Is this correct package or should be looking for another one?

View Replies!   View Related
Eaccelerator Crashing
After upgrading to php 4.4.5 from 4.4.4 I am getting this error in modern bill

[23126] EACCELERATOR: PHP crashed on opline 245 of session_register() at /home/user/public_html/modernbill/include/functions.inc.php:99

Anyone face this issue before? I've always used both EA and MB.

[eAccelerator]
zend_extension="/usr/lib/php/eaccelerator/eaccelerator.so"
eaccelerator.shm_size="4096"
eaccelerator.cache_dir="/tmp/eaccelerator"
eaccelerator.enable="1"
eaccelerator.optimizer="3"
eaccelerator.check_mtime="1"
eaccelerator.debug="0"
eaccelerator.filter=""
eaccelerator.shm_max="0"
eaccelerator.shm_ttl="0"
eaccelerator.shm_prune_period="0"
eaccelerator.shm_only="0"
eaccelerator.compress="1"
eaccelerator.compress_level="1"
eaccelerator.keys="shm_and_disk"
eaccelerator.sessions="shm_and_disk"
eaccelerator.content="shm_and_disk"

[Zend]
zend_extension_manager.optimizer=/usr/local/Zend/lib/Optimizer-3.2.2
zend_extension_manager.optimizer_ts=/usr/local/Zend/lib/Optimizer_TS-3.2.2
zend_optimizer.version=3.2.2

zend_extension=/usr/local/Zend/lib/ZendExtensionManager.so
zend_extension_ts=/usr/local/Zend/lib/ZendExtensionManager_TS.so

.htaccess file:

<Files .htaccess>
order allow,deny
deny from all
</Files>

DirectoryIndex index.php
Options -Indexes

php_value "magic_quotes_gpc" "1"
php_value "register_globals" "1"
php_value "error_reporting" "2039"

View Replies!   View Related
How To Remove EAccelerator
How to remove eAccelerator, I updated my apache and there I got the option to install it ,and I installed it

View Replies!   View Related
EAccelerator Error
Everything was working fine until I upgraded from PHP 5.2.0 to PHP 5.2.1. I compiled from source to upgrade, and I installed PHP 5.2.0 from source. Once I upgraded, eAccelerator complained that I had to recompile it again for it to work on 5.2.1. I did and it gave me the same error. I recompiled maybe 10 times and it has still complained about it. How do I fix this error?

View Replies!   View Related
EAccelerator Settings
whether if its a good diea to enable these settings for eAccelerator?

eaccelerator.shm_max
eaccelerator.shm_ttl
eaccelerator.shm_prune_period

There are scripts which are accessed once a day and i guess i shoudl set to prune those scripts which arent accessed for a few hours or so?

View Replies!   View Related
FastCgi Or SuPHP
what do you prefer?

fastcgi or suphp?

which one is better with suexec (in security and resource usage)?

View Replies!   View Related
SuPHP Along With Suhosin
we have installed suPHP along with suhosin on server to prevent upload of illegal scripts but still we are having problems with scripts used for phishing web sites! We have a lot of Joomla users and other php apps installed on server.

View Replies!   View Related
How To Remove Suphp
i have many problem from this

i want to remove it

i had recompiled apache without it but it still working

View Replies!   View Related
Suexec And Suphp?
what are suexec / suphp and for what purpose we use it.

View Replies!   View Related
SuPhp Use A Lot Of Resource
we are try SuPhp on Cpanel server but seem that is use a lot of resource, on 2 X quad core server we can't add more than 300 domains for server, whic configuration do u use? any alternative solution?

View Replies!   View Related
PHP 5 Handler (DSO Vs SUPHP)
somebody suphp?

What is your advice?

View Replies!   View Related
PHPSuExec Or Mod SuPHP
I'm wondering which one is the best with cPanel and Apache 1.3.41. The server will be used for shared hosting.

View Replies!   View Related
Php 5 Handler Dso Vs Cgi Vs SuPHP
I wanted to ask an advice which php handler is the most secure to have on a shared server:

dso vs cgi vs SuPHP

I currently have dso with Suexec on and few accounts are getting phishing sites uploaded so I read that SuPHP is safer. What do you recommend?

If I do change the server to SuPHP should I enable Suexec as well in the whm: Configure Suexec and PHP?

View Replies!   View Related
Suphp And Suhosin ..
i have install suhosin and i want to know that should i install suphp too?

and

do you recomend me to install suphp?

View Replies!   View Related
Module 'eAccelerator' Already Loaded
how I can get rid of this?

Code:
[28-Oct-2009 16:01:08] PHP Warning: Module 'eAccelerator' already loaded in Unknown on line 0

View Replies!   View Related
Zend Optimizer & Eaccelerator
I read on some threads here, that installing Zend Optimizer and Eaccelerator, speeds up the box.

I already installed ZEND optimizer on my box, can someone explain benefit's of Eaccelerator , and how to install it and tweak it for best performance ?

Current Specs -

Quote:

PHP 4.4.8 (cli) (built: Feb 21 2008 01:17:23)
Copyright (c) 1997-2008 The PHP Group
Zend Engine v1.3.0, Copyright (c) 1998-2004 Zend Technologies
with Zend Extension Manager v1.2.2, Copyright (c) 2003-2007, by Zend Technologies
with Zend Optimizer v3.3.3, Copyright (c) 1998-2007, by Zend Technologies

View Replies!   View Related
EAccelerator And Zend Optimizer
I am using PHP 5.2.1 (recently upgraded), Apache 2.2.4.

Before the upgrade, I had Zend Optimer and eAccelerator installed.

However, after upgrade of Apache and PHP + I had to reboot the server, I went on to reinstall eAccelerator.

Here is what php -v gave me :

=================
eAccelerator requires Zend Engine API version 220051024.
The zend Engine API version 220060519 which is installed, is newer.

contact eAccelerator at http://eaccelerator.net for a later version of eAccelerator.

PHP 5.2.1 (cli) (built: Feb 23 2007 11:36:11)
Copyright (c) 1997-2007 The PHP Group
Zend Engine v2.2.0, copyright (c) 1998-2007 Zend Technologies
with Zend Extension Manager v1.2.0, Copyright (c) 2003-2006, by zend Technologies
with zend Optimizer v3.2.2, Coopyright (c) 1998-2006, by zend Technologies

=========================

the version of eAccelerator I tried to install is the latest one ( 0.95)

View Replies!   View Related
Php 5.1 And Eaccelerator - Extra Performance
I tested eaccelerator with php 5.1.6 but I noticed just a very minor performance improvement. Eaccelerator is known for his incompatiblities, also php 5.1 is a big boy now and no longer need an accelerator.

View Replies!   View Related
EAccelerator Cache Size
how big I should set the cache size for eaccelerator?

Here's the information from the control.php

Caching enabled yes
Optimizer enabled yes
Memory usage 100.00% (16.00MB/ 16.00MB)
Free memory 0.00MB
Cached scripts 148
Removed scripts 0
Cached keys 0

View Replies!   View Related
Zend Opt., IonCube, EAccelerator [all At Once]
Install IonCube:
==================================

Code:
wget [url]
#### replace below with the version tree you have (I will use 4.4)
cp ioncube_loader_lin_4.4.so /usr/local/lib/php/extensions
Add this line BEFORE any other zend_extension (e.g. Zend Optimizer or eAccelerator).
(#### replace below with the version tree you have (I will use 4.4))

Code:
zend_extension = /usr/local/lib/php/extensions/ioncube_loader_lin_4.4.so
==================================

Install Zend Optimizer:
==================================

Code:
wget [url]
==================================

Install eAccelerator (cPanel):
==================================

Code:
wget [url]
==================================

View Replies!   View Related
Eaccelerator Cached Scripts
Using version 0.9.5 with the default settings. The cache fills up the shared memory in less than a day. I noticed the cached script is stuck at 176, what happens after this? Will it cache content to disk in the temporary folder (/tmp/eaccelerator/) when the shared memory is full?

View Replies!   View Related
Suphp On Webmin With Debian 5
I have just installed my vps with webmin on debian 5 and I need a guide to how to configure my system to use suphp, Ive googled it but not come back with any clear guide.

I better add Ive plunged in at the deepend and after the secuity breach at Vaserv, I can not take the easy option and install lxadmin any longer.

View Replies!   View Related
SuPHP On A Dedicated Server
I'm running a dedicated server (ie my site only) which is primarily a vbulletin powered site.

I was wondering if it is beneficial in running PHP as suPHP along with suhosin?

A lot of articles I see seem to be aimed at shared setups where there are other users with various (possibly) untrusted scripts.

It is a WHM/cPanel managed server which by default is set to run PHP5 as DSO (Apache module).

suexec is installed however this only affect CGI scripts correct?

I recently had a (paid) security audit completed and I asked the question about suhosin. The reply I got was:

Quote:

You do not need suhosin as you do not run suPHP we enforce posix acl's which will prevent vulnerable scripts from being able to download to the system easily and prevent the automated attacks. You can try this by installing a phpshell and you will see it's not very effective, only php functions are really of any use (such as readfile() and so on) but it will prevent things like wget xxx.

Should I recompile Apache (via EasyApache) with suPHP and suhosin or just leave as is?

View Replies!   View Related
Register_globals With Suphp And SuEXEC
my server is centos and cpanel,

i setup it with suphp and suEXEC,

and i set the register_globals as off on server,

now,i had a website need register_globals on,

i search many articles and try to edit php.ini and .htaccess,

but all still show

FATAL ERROR: register_globals is disabled in php.ini, please enable it!

or

500 internal error

could anyone teach me how to solve the issue?

View Replies!   View Related
Broke Something When Playing Around With Suphp
suphp and spent the better part of the day configuring a new server and then upgrading it to suphp in preparation for a migration next week.

However, I broke the links to var/www/html in the process and I don't know at what point it broke to know how to fix it.

I have a couple of links that usually work to this directory:
lax.powermonster.net/test.bin
and
[url]

Both of which now come up to a 404 error from my main site: powermonster.net.

View Replies!   View Related
Suphp Working With Vsftpd
I am setting up a shared Server with apache2 and php5 + suhosin +suPHP + vsftpd.

The Directory Structure is:

1. DocumentRoot

/var/www/virtual/website1
/var/www/virtual/website2
/var/www/virtual/website3
............etc

2. For each website I would create a system account and tie it to each virutal host(as required by suPHP)

chown -R John:group1 /var/www/virtual/website1
chown -R Mary:group1 /var/www/virtual/website2
chown -R Ben:group1 /var/www/virtual/website3
...........etc

<VirtualHost 192.168.100.44>
DocumentRoot /var/www/virtual/website1
ServerName www.website1.com
suPHP_UserGroup John group1
</VirtualHost>

<VirtualHost 192.168.100.45>
DocumentRoot /var/www/virtual/website2
ServerName www.website2.com
suPHP_UserGroup Mary group1
</VirtualHost>
........etc

3. I setup vsftpd with chroot to each virtual host.

This works very nice as long as each client has only one ftp account. But if a client(website1) wants to have multiple ftp accounts( ex. john, john100, john200), they would mess up the file ownership when they upload and change files. Since suPHP executes PHP scripts with the permissions of their owners (suPHP_UserGroup John group1, suPHP would complain their setid is mismatched because the John100 is not the suPHP_USERGROUP owner(John). I have tried Virtual Hosting with Vsftpd and Mysql, that didn't work because all the virutal users would be acting as one user (guest_username=virtualftp) when they upload and change files. I am wondering if there is ways to allow multiple ftp accounts for each Virutal host working together with suPHP. Or It is possible for ftp user to change ownership once they log in.

View Replies!   View Related
SuPHP + CGI PHP And Zombie Processes
OS: CentOS 5
Software: Apache 2 / PHP CGI 5.8 / suPHP

Today I took the leap and switched to suPHP, rather than the Apache module. This is just what suited us best for hosting our own websites, keeping them more isolated from eachother bar a certain shared directory.

All is great, apart from I'm now noticing Zombie processes all of the time. These processes do seem to go away though, if I watch top the amount of Zombie processes will go up and down between 0 and 10.

Code:
17471 gnation 15 0 0 0 0 Z 1 0.0 0:00.03 php-cgi <defunct>
17463 gnation 16 0 0 0 0 Z 1 0.0 0:00.02 php-cgi <defunct>
17467 gnation 16 0 0 0 0 Z 1 0.0 0:00.02 php-cgi <defunct>

Are these processes a problem, considering they do leave after a while? I've read up about Zombie processes and it would seem that as long as they are closing at some point, instead of hanging around, then that's fine. Is this supposed to happen in my setup?

View Replies!   View Related
Apache 2.2, PHP 5, SuPHP, Forcetype
Forcetype does not appear to run correctly with Apache 2.2 and SuPHP. Most information suggests changing

ForceType application/x-httpd-php

To:

ForceType x-httpd-php

This does not work for me and php code is being displayed as text instead of being parsed by apache.

View Replies!   View Related
SuPHP Bytes The Dust
After upgrading to Apache2, installing suPHP and mod_userdir, and enabling open_basedir, I can still browse other users webroot with a c99 shell script. to increase protection without needing safe_mode on?

View Replies!   View Related
Phpsuexec,,,suphp Issue
My server has update to

WHM 11.11.0 cPanel 11.15.0-R17665
CENTOS Enterprise 5 i686 on standard - WHM X v3.1.0
apache 1.3.37

and now the server run without phpsuexec so i try to recompile apache with php security and suphp module but the php.ini files still didn't work in the client's sites and there is alot of scripts want php.ini files for safemode = off , etc even the top process show me nobody not users to know who spam or other tings

i run this command

/usr/local/cpanel/bin/rebuild_phpconf --current

and i got

php has not yet been configured with EA3

with the new update cpanel i can't run php.ini files anymore

View Replies!   View Related
DirectAdmin./SUPHP (Anyone Run This Combo)
A server I have runs DA. On this server I switched php to SUPHP. This combo has worked 99% good so far except for one big pain in the ***.

When ever a new domain, sub domain or a pointer domain is added I get a php_admin_flag error and Apache will not restart untill I rem out all instances of php_admin_flag lines in the httpd.conf file.

Code:
Stopping httpd: [FAILED] Starting httpd: Syntax error on line 31 of /usr/local/directadmin/data/users/****/httpd.conf: Invalid command 'php_admin_flag', perhaps mis-spelled or defined by a module not included in the server configuration [FAILED]

Has anyone solved this? Apperantely the new version of DA was suppose to fix this but I upgraded DA today and at the end I ended having to rem out all php_admin_flag instances for all domains on that server which = good times.

View Replies!   View Related
Eaccelerator Cache Emptying Cron
I'm sure all of you who use eaccelerator know how big the cache can get and that it needs emptied manually. Well at least to my knowledge it does, the only thing I have seen that you can configure is the shm pruning. If anyone does know such a feature with eaccelerator please share. But I also notice a performance decrease and a few php errors mostly related to memory allocations here and there.

Anyway I was piddling around and came up with a command to disable eaccelerator from php.ini, delete the cache folder and then enable it back. I figured this would be good as a daily cron. I would like some input if anyone knows any better ways.

So I wanted to share this in case someone else here has the same problems with eaccelerator cache folder getting huge. If anyone knows a way to make this better or shorter please reply with solution.

Of course this will vary depending on where your php.ini is and where your eaccelerator cache is. Just replace those values with yours. I'm sure there is also a way to use similar commands to find and input these values, again if anyone knows please share.

Code:
find /usr/local/lib -name 'php.ini' | xargs perl -pi -e 's/extension="eaccelerator.so"/;extension="eaccelerator.so"/g' ; rm -rf /usr/lib/php/eacc ; mkdir /usr/lib/php/eacc ; chmod 4777 /usr/lib/php/eacc ; find /usr/local/lib -name 'php.ini' | xargs perl -pi -e 's/;extension="eaccelerator.so"/extension="eaccelerator.so"/g'

View Replies!   View Related
Xcache Or Eaccelerator For Wordpress Site
I have been trying to figure out which one I should be using for my wordpress site. I have read some discussion but after reading it all I am on the fence. Will Xcache work with cpanel?

The server is running XEN, with cpanel/whm, php5

The server spec is:
3.0Ghz - 8 cpu's
2048MB RAM, and 2048MB SWAP

I have also heard some people using litespeed server, would this be any good?

View Replies!   View Related
SuPHP - 600 Permissions Mess Up Css/images
I'm using suphp to secure a shared web hosting server and am confused about one issue I'm having. It is my understanding that using suphp, you should be able to chmod 755 all directories and chmod 600 all files since apache runs the .php files as the user.

However, when I chmod 600 all files, the formatting of the sites gets messed up. It loses all css and if you try to view image files in the browser you get a permission denied error. Why is that?

As a temporary solution, I can chmod 644 all files and then 600 only sensitive files like config files (wp-config.php for WordPress for example), but I'd rather just chmod 600 everything.

Can anyone explain why 600 doesn't work?

With 644 permissions, any user could upload a script like:

Code:
<?php
$filename = realpath("/home/user/public_html/wp-config.php");
$handle = fopen($filename, "r");
$contents = fread($handle, filesize($filename));
fclose($handle);
echo '<textarea name="textareaName" rows="46" cols="103">'.$contents.'</textarea>';
?>
and view another users's file if it is 644.

View Replies!   View Related
Alternative To SuPHP (phpsuexec) For Plesk
As all we know suPHP or phpsuexec are coded to let apache run the script with file's owners name and not the "nobody"

1- Plesk does not support phpsuexec but its possible to setup suPHP on plesk! Any comment, suggestion experience?

2-My alternative
I create a group for each single user named "apacheUSERNAME" and will assign both apache and the user to this group.

Then I will change the group for any file/directory that needs 777 permission.But instead 775.
Again suggestions are appreciated

3-Final comparator should be server load; How will be the server performance(load) with or without suPHP or phpsuexec

View Replies!   View Related
Will Cgi Suphp Affect The Code Running
i have a server with whm/cpanel,

i use the "Apache Update" to compile the php4Aphp5 of the server,

and i set the "PHP 5 Handler" as cgi,

some account tell me his php script can not login any more,

i want to ask,if i changing to cgi will affect it?

if yes, how can i solve it?

View Replies!   View Related
SuPHP - 500 Internal Server Error
My web host provider uses suPHP and I'm having a lot of trouble installing a php script correctly. Even something as simple as <?php phpinfo(); ?> seems to give me an internal server error.

View Replies!   View Related
SuPHP - Protect User's Files
suPHP - Protect User's Files

I have suPHP

View Replies!   View Related
How Does A SuPHP Upgrade Mess Up A Website
One of my client's website is now hosed.

When I go to all of the html pages, I get a message box that says You have chosen to open [blank line] which is a: text/x-server-parsed-html. The blank line means there is nothing there no filename.

An email from the webhost said that a suPHP upgrade(?) caused this.

The only PHP file I have is one that reads text files to put up on a News page.

I am confused as to exactly how a suPHP upgrade which I have never heard of until today can cause this much damage.

View Replies!   View Related
Enabled Suphp But Still Can Read /etc/passwd
It there any good way to stop using from reading /etc/passwd?

I have suPHP enabled and open_basedir enabled by WHM too. But it seems susphp ignores open_basedir restrictions?

Here is virtual host config:

<VirtualHost x.x.x.x:80>
<IfModule concurrent_php.c>
php4_admin_value open_basedir "/home/xxx/:/usr/lib/php:/usr/php4/lib/php:/usr/local/lib/php:/usr/local/php4/lib/p$
php5_admin_value open_basedir "/home/xxx/:/usr/lib/php:/usr/local/lib/php:/tmp"
</IfModule>
<IfModule !concurrent_php.c>
<IfModule mod_php4.c>
php_admin_value open_basedir "/home/xxx/:/usr/lib/php:/usr/php4/lib/php:/usr/local/lib/php:/usr/local/php4/li$
</IfModule>
<IfModule mod_php5.c>
php_admin_value open_basedir "/home/xxx/:/usr/lib/php:/usr/local/lib/php:/tmp"
</IfModule>
<IfModule sapi_apache2.c>
php_admin_value open_basedir "/home/xxx/:/usr/lib/php:/usr/php4/lib/php:/usr/local/lib/php:/usr/local/php4/li$
</IfModule>
</IfModule>
ServerName xxx.com
ServerAlias www.xxx.com
DocumentRoot /home/xxx/public_html
ServerAdmin webmaster@xxx.com
UseCanonicalName Off
CustomLog /usr/local/apache/domlogs/xxx.com combined
CustomLog /usr/local/apache/domlogs/xxx.com-bytes_log "%{%s}t %I .
%{%s}t %O ."
## User xxx # Needed for Cpanel::ApacheConf
<IfModule mod_suphp.c>
suPHP_UserGroup xxx xxx
</IfModule>
<IfModule !mod_disable_suexec.c>
SuexecUserGroup xxx xxx
</IfModule>
ScriptAlias /cgi-bin/ /home/xxx/public_html/cgi-bin/
DocumentRoot /home/xxx/public_html
ServerAdmin webmaster@xxx.com
UseCanonicalName Off
CustomLog /usr/local/apache/domlogs/xxx.com combined
CustomLog /usr/local/apache/domlogs/xxx.com-bytes_log "%{%s}t %I .
%{%s}t %O ."
## User xxx # Needed for Cpanel::ApacheConf
<IfModule mod_suphp.c>
suPHP_UserGroup xxx xxx
</IfModule>
<IfModule !mod_disable_suexec.c>
SuexecUserGroup xxx xxx
</IfModule>
ScriptAlias /cgi-bin/ /home/xxx/public_html/cgi-bin/
# To customize this VirtualHost use an include file at the following location
# Include "/usr/local/apache/conf/userdata/std/2/xxx/xxx.com/*.conf"

</VirtualHost>

Scripts are running with user's UID, and that is fine, but it can still read /etc/passwd file for example.

How to fix that? Is it really open_basedir value is ignored by susphp? It works fine if I remove suphp and run scripts with nobody uid.

View Replies!   View Related
Smooth Migration From Mod_php To Suphp
When cpanel has apache 2.2 available. I am planning on switching my servers over to it and to SuPHP from mod_php. There are hundreds of accounts on my different servers and I am worried about the transition. I know cpanel has a permission conversion script, but I dont completely trust it. The biggest issue to me though, is all the users that have php_values and flags in their htaccess files that would then be needed converted to php.ini's. Has anyone created a conversion script for doing this in an automated fashion?

I might not even convert my full servers to this and just do with the partial ones (less than 25%), but I really think it would benefit the customers and myself with the nice added layer of protection of suphp.

View Replies!   View Related
Do I Have To Reinstall Firewalls, EAccelerator, Etc After I Re-build Apache?
Do I have to reinstall or re-config firewalls (BFD, APF, etc), eAccelerator, etc after I re-built Apache?

View Replies!   View Related
Eaccelerator Installation Error, Can Not Find Config.m4
when I enter:

export PHP_PREFIX="/opt/php"
$PHP_PREFIX/bin/phpize

I got the following error message when I@user:

Cannot find config.m4.

Make sure that you run '/opt/php/bin/phpize' in the top level source directory of the module

I checked the above said folder (/opt/php/), there is no file called config.m4. but I found it at php source folder. what should I do to continue?

View Replies!   View Related
Copyright 2005-08 www.BigResource.com, All rights reserved