Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [open-basedir]

28 questions
1
vote
2 answers

open_basedir and wordpress

Essentially i found out you can prevent one site which has a security hole from modifying/reading another site via "open_basedir". However when i upload media files using wordpress i got the error [error] 3048#0: *42070 FastCGI sent in stderr: "PHP…
user274
1
vote
1 answer

php.ini use multiple include paths - openbasedir restriction

I need to allow an include path for a vhost subdomain on Plesk 10. I've edited the PHP PEAR path into /etc/php.ini as I'm happy for it to be globally available: include_path = ".:/usr/share/pear/" This works insofar as PHP is able to see the files…
MrFidge
  • 321
  • 3
  • 5
  • 15
1
vote
1 answer

ApacheHTTPD mod_suexec, safe_mode, open_basedir

as the Debian developers consider safe_mode (which will not make it into PHP6) and open_basedir inherently broken security measures, I wonder if they can be considered replaceable by mod_suexec combined with mod_fcgid. Do you think this is…
benjamin
  • 187
  • 1
  • 12
1
vote
1 answer

Find what paths are required for open_basedir?

We have a server (running PHP-FPM 7.4 on Apache) that hosts various scripts, frameworks and applications like DokuWiki. It's grown to a pretty complex beast. We would like to apply an open_basedir restriction. Just setting a best guess open_basedir…
xebeche
  • 363
  • 3
  • 13
1
vote
0 answers

Apache setting "SetEnv PHP_ADMIN_VALUE open_basedir=path" is not restricted to its virtual host config

I have an Apache web server installed on my Ubuntu server 18.04 with many virtual hosts configured, I use different open_basedir for each vhost, recently I had to change normal php7.2 to php-fpm to be able to enable http2 since mpm_prefork is not…
Ahmed Hamad
  • 11
  • 2
0
votes
1 answer

PHP's open_basedir value giving a binary value in Apache logs

Reviewing logfiles to figure out why my site was down a few days ago, I found hundreds of lines like these (partially redacted with "x"): [Fri Nov 27 23:14:36 2009] [error] [client xxx.xxx.xxx.xxx] PHP Warning: require_once(): open_basedir …
scotts
  • 237
  • 2
  • 9
0
votes
1 answer

Not within allowed paths: /usr/bin/gpg / CentOS 6

Trying to use the PHP filter_var function, but am getting the following in the error_log when it executes: [Wed May 11 10:56:22 2016] [warn] [client 24.69.156.92] mod_fcgid: stderr: PHP Warning: is_executable(): open_basedir restriction in effect.…
Luke Pittman
  • 141
  • 1
  • 7
0
votes
2 answers

Different php_value open_basedir based on domain name in .htaccess

I want to limit access to files using PHP open_basedir for multiple domains. Every domain sits in own directory, so I want prevent all domains PHP scripts from interfering with each other. How can I set different open_basedir path for every domain…
Martin
  • 109
  • 2
  • 5
0
votes
1 answer

make two different domains accessible to each other whm reseller account

I have a WHM reseller account which has 2 configured domains (each one with his own cPanel account. I need to be able share some code between both domains. What should I do? One thing I need do do is to change open_basedir directive. But what about…
brpaz
  • 179
  • 1
  • 2
  • 9
0
votes
1 answer

Mediatemple: PHP open_basedir doesn't open private folder

On Mediatemple, I have a file in /var/www/vhosts/domain.com/private that needs to be included in a PHP script. I've changed vhost.conf, changed /etc/php.ini and no matter what, I still get "failed to open stream: Permission denied". When I show the…
fredrover
  • 101
0
votes
2 answers

Server Error (open_basedir restriction) with PHP Mailer?

I am receiving an open_basedir restriction at random times when consumers are finishing an enrollment on my website. I am able to complete the enrollment process just fine from my machine, as well as two other test machines but it appears some…
JM4
  • 1,144
  • 3
  • 18
  • 29
0
votes
2 answers

Prevent access to files of other users

In my server (cpanel) I see now that with a simple DIR script (PHP) I can list files of all users over public_html /home/[user]/public_html/ How can I prevent users from accessing the files of other users?
user35260
-1
votes
2 answers

Is it safe to add /usr/bin to open_basedir?

A hacking incident a couple of months ago taught me the importance of using open_basedir on PHP sites. But now I need to get ImageMagick to work on a Drupal site and I get an error saying it can't access /usr/bin/convert because of open_basedir.…
Kevin
  • 3
  • 2
1
2