ISPsystem.com Forums

ISPsystem.com Forums (http://forum.ispsystem.com//index.php)
-   Troubleshooting (http://forum.ispsystem.com//forumdisplay.php?f=11)
-   -   disabled PHP functions (http://forum.ispsystem.com//showthread.php?t=1996)

paketschubser 09-24-2012 12:53 AM

disabled PHP functions
 
Hello,

since one of the last ISPmanager updates the installtion routine seems to disable the PHP functions "exec,passthru,shell_exec,system,proc_open,pop en" for the Apache PHP module (at least on Debian in /etc/php5/apache2/php.ini).
As these functions are essential for several software to work (e.g. Softaculous, Typo3 ImageMagick functions, ...) this seems to be a bad idea.

I guess this change was made because of security concerns when mod_php is used with the Apache mpm prefork or worker. Since we're using the mpm ITK where mod_php is also called with the UID of the website owner we don't have to worry about security in combination with mod_php.

Could you please state why this change was made and how to handle problems with software which is no longer working.
Maybe a better way would be to check which mpm is installed before auto disabling several PHP functions.

slava 09-24-2012 07:20 PM

These functions are disabled once the installation. We tried to disable all cases potentially unsafe for the user, for the reason that it can reinstall apache further through the panel. The panel does not replace any the server administrator for after-install configuration.


All times are GMT +2. The time now is 01:46 AM.

Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2024, vBulletin Solutions, Inc.