open_basedir problem !

[joximu]

hm :-(((((( and vhcs.net is still down (dns problem???) :-(((((
noone notices this...

ok - then you only have the /etc/php.ini - or maybe /etc/php5/... somewhere...

find / -name php.ini

will find the possibilities...

[Eminos]

Yea man, I know where my php.ini is. But how do I disable the open_basedir?
Now it says:
; , if set, limits all file operations to the defined directory
; and below.  This directive makes most sense if used in a per-directory
; or per-virtualhost web server configuration file. This directive is
; *NOT* affected by whether Safe Mode is turned On or Off.
open_basedir =

So, it's not "set", but maybe it's ON ? How do I turn it off ?

/E

[joximu]

no sorry...
since you don't use fastcgi there is the possibility to set php options in the apache configuration. So look for the part, where the domain is configured - there mey be lines like
php(_admin)_value/flag
or - at least it may be set in a .htaccess file located in the web folder...

Hope you'll find it

[Eminos]

I have the folowing in sites-enabled/vhcs2.conf:

<Directory /var/www/vhcs2/gui>
php_admin_value open_basedir "/var/www/vhcs2/gui/:/etc/vhcs2/:/proc/:/var/www/virtual/:/tmp/"
</Directory>

# httpd dmn entry PHP2 support BEGIN.
php_admin_value open_basedir "/var/www/virtual/boshosting.net/:/usr/share/php/:/tmp/"
# httpd dmn entry PHP2 support END.

[joximu]

the second seems to be *your* entry.
the listing of folders is the same as in the error message...
/var/www/virtual/boshosting.net/:/usr/share/php/:/tmp/

[Eminos]

exactly.
So it doesn't seem to be anything wrong with the settings

/E

[joximu]

yes - but you could disable this lin for a moment, reload apache and test your app again...

maybe you can add more directories to the list...

i don't know... weird...

[Eminos]

Alright,
I disabled that line and it helped. Now I can install Joomla components, and I only have the problem with the Filemanager now.

Anyway, what is the risk in having it like this (disabled open_basedir) ?

/E

[joximu]

Risk is:
the customers can install php application which can access all files on the server as long as the files are readable by apache. If it's only you then there is no big risk (just keep an eye on security updates of the system and the php apps (joomla etc)).

[Eminos]

Well, it's only me ON THAT virtual domain. On other customer domains I still have the open_basedir enabled.

/E