Multi Php config module and apache vhost manager

[elijahbate]

Hi all,

Just incase anyone is interested I have just started working on a module that allows a client/user to have multiple php configs

And also another that allows admins to manage the vhost files directly from the panel.

Elijah

[Me.B]

Would that break the openbasedir locks? Usually this feature is enabled with SU apache module that would execute each use under each own space. We rely here on suhosin... Not sure that security will be ok.

M B

[TGates]

Multiple php.ini setups is good as long as it doesn't break security as Me.B stated, but being able to edit the vhosts file from the panel I would think is a big no-no. If you put one wrong entry or simple typo, your server is down until you can SSH in and fix it. Not a good idea there

Don't forget to post in the proper forum sections: Moved to Module section.

[elijahbate]

Great point, I am looking into this but I believe you should be able to reference the custom php.ini
in the vhost files but also should allow you to still user php_values to set openbasedirs.

Sounds easy but nothing is ever that easy, I shall have a play around and see what sort of results i get.

@TGates... Yeah thats it one typo would kill it but ideally I would separate zpanel to its own file and include the other vhostfile in that(or something along those lines)

When saving the updated vhost either in php or bash check the vhost is valid as much as possible then update and reload check that the output of reload was a success otherwise revert back to previous vhost file.

And my bad on the forum selections

edit.. Or do something similar to webmin's vhost changer and use a form to set the vhost options with limited direct text changes available.

[TGates]

Well, that is what the custom vhosts entries are for
There has to be a way to multi php.iini with one main one that controls the security...(like that other panel with a c does)

[elijahbate]

Okay some very basic results.

Copied the php.ini into /var/zpanel/hostdata/zadmin/config/php/php.ini
Changed the settings to have aspstyle tags on instead of off
added in vhost

Code:

PHPINIDir /var/zpanel/hostdata/zadmin/config/php

Restarted apache
Success phpinfo() shows custom .ini loaded and settings but also shows the correct openbasedir!
But this will still need to be tested further

[elijahbate]

Okay so I have made my module the code in theory should work but I am having some issue when running code as a module.

I was using following code

Code:

//At this point custom.ini doesnt exist
//This should attempt to create
$tempStr = 'all lines from file';
$iniFile = fopen($customINI,'w');
fwrite($iniFile,$tempStr);
fclose($iniFile);

Using that code in a clean php page from zpanel/sentora directory works but in module no go. I have tried a heap of different combinations in module like fs_filehandler::CreateFile, fs_filehandler::UpdateFile

weirdly I have no problems reading the files though.

I have been trying to use the logging structure but as soon as a reference the global for it the php process stop get a white page on function run.

Any help would be appreciated

[Me.B]

This is again bad for security. AS if any hacker able to access php.ini he will be able to change it a then unlock openbase DIR!

Custom php.ini like in cpanel rely on another lock down using for each user locking to home directory while zpanel/sentora use ONE apache user for ALL WEBSITES.

It won't be secure unless you change ALL the way how apache is implemented and permission unless you want to feel the bite.

M B

[elijahbate]

This is again bad for security. AS if any hacker able to access php.ini he will be able to change it a then unlock openbase DIR!

Custom php.ini like in cpanel rely on another lock down using for each user locking to home directory while zpanel/sentora use ONE apache user for ALL WEBSITES.

It won't be secure unless you change ALL the way how apache is implemented and permission unless you want to feel the bite.

M B

@me.b

From the test run setting the php.ini in the vhost and also setting the php_values the values trumpted the .ini.

Unless I am doing something wrong...(more than possible!!!) then I believe that the openbasedirs would still be set by the vhost entries not the php.ini

If I am wrong and security is compromised by this well then as you said I shall have to have go from ground up and fiddle with apache.

[elijahbate]

@[me.b]

I have looked into it further tried setting the openbase dir in the custom.ini but the php_values set in the vhost trumpt the .ini file.

But in saying that this method is not effective enough, take alot of screwing around as you can only set one custom.ini in the vhost regardless of vhost formating, I think there is a way to do it in the .htaccess fiel but yuck..

So I believe next step is trying to cofigure php as FastCGI