Support

DraCoola · #1 11-24-2009, 07:17 PM

After using PHP LSAPI 5.0b2 release (http://www.litespeedtech.com/support...ead.php?t=3545 and http://www.litespeedtech.com/support...ad.php?p=17555 ), one of my user reporting error from php functions, and suddenly, disable_function on php.ini is affected to his script :

Screenshot ---> http://img412.imageshack.us/img412/8485/afterphp.jpg

"Warning: get_current_user() has been disabled for security reasons" was never happen before (on default LSWS php) with the same php.ini configuration.
I am on 64 bit lsws (4.1RC2) with CENTOS 5.3, using php 5.2.11.
FYI : Cpanel has update their MySQL version to 5.0.85 at couple hours ago.

But.... moving that account/domain to my another Cpanel server (apache 2.2.14, default php 5.2.11, mod_suphp, MySQL 5.0.85, all are the same as my LSWS server, except for using LSWS + PHP LSAPI 5.0b2) has cured that script.

mistwang · #2 11-24-2009, 08:17 PM

Is that function listed in php.ini disable_function configuration?

DraCoola · #3 11-24-2009, 08:43 PM

Yes it does.
But that doesn't influence before either on the same script and the same php.ini
So the old php has "some kind of broken" because it still can passing through disable_function configuration?

Btw I try to put custom php.ini (without disabling get_current_user) on that user directory (on LSWS server) but still resulting the same.
How to make LSWS to accept custom php.ini applied to per user?

mistwang · #4 11-24-2009, 09:15 PM

It works as expected then.

You can override the php.ini in main httpd.conf <virtualhost ...> section with php_admin_value.

Per user custom php.ini does not work by default, search for "PHPRC" if you want to use per user php.ini.

mistwang · #5 11-24-2009, 09:17 PM

If you configure per user php.ini, the global php.ini will be ignored for that user, so it could be a security concern for shared hosting environment as you lost the central control of php.ini.

DraCoola · #6 11-24-2009, 10:04 PM

I don't really understand about "PHPRC"...
But I perhaps need to override php.ini as per request if my user ask for that.
So not the rest of them.
I hope can soon find that "PHPRC" on this forum or on your wiki docs

If custom php.ini for one user can override global php.ini, so that user can do anything, e.g. : walking around another user dir and my whole server with php shell?

By the way... the other php error warning on above screenshot (except error caused by disable function) are purely caused by PHP LSAPI 5.0b2?
Even the user has migrated and cured now to apache server, I hope you can fix that on the next b3 release

mistwang · #7 11-24-2009, 10:21 PM

Quote:

Originally Posted by DraCoola

By the way... the other php error warning on above screenshot (except error caused by disable function) are purely caused by PHP LSAPI 5.0b2?

No, it is not related to PHP LSAPI, but PHP internal errors.

DraCoola · #8 11-24-2009, 10:30 PM

But moving that script to another server (default Cpanel, apache) with all the same software configurations, versions, kernel, and hardwares, (LSWS server on dallas, Apache server on seatle) make all of error warning are completely dissapear.

Please suggest me on how to fix this php internal errors

DraCoola · #9 11-24-2009, 11:45 PM

Another error report from other user :

---> http://img163.imageshack.us/img163/476/errorb.jpg

Switch to Apache, and then all errors are gone.
I am now try to rebuild php from litespeed WHM front menu.

DraCoola · #10 11-25-2009, 12:24 AM

UPDATE :

Finished rebuild and switch back to default php 5.2.11 from litespeed whm plugin (http://xxx.xxx:2086/cgi/lsws/index.php?do=buildPHP).
It is successfully makes all errors warning to get disappear