Joomla integration and security on VPS, ioncube, mod_security, Linux, and PHP versions


Posted On: 23 Jan 2009 08:10 AM
hi
to make this short, please tell me if our PHP version is over 5.1 or just 5
thanks

Posted On: 23 Jan 2009 08:14 AM
PHP 5.2.6 (cgi) (built: Aug 15 2008 01:18:07)
Copyright (c) 1997-2008 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2008 Zend Technologies
with the ionCube PHP Loader v3.1.32, Copyright (c) 2002-2007, by ionCube Ltd., and
with Zend Extension Manager v1.2.2, Copyright (c) 2003-2007, by Zend Technologies
with Zend Optimizer v3.3.3, Copyright (c) 1998-2007, by Zend Technologies

Let us know if you need additional assistance.
Thanks,

Posted On: 23 Jan 2009 09:22 AM
hi
sorry to bother but maybe you can enlighten me
i have a cms installed and the system info that it gathers about the server is:
PHP Version: 4.4.8
I'm not sure why that is
Kindly
Posted On: 23 Jan 2009 09:24 AM
Hello,
can you please provide me with the account which you are seeing this?
Thanks,    
Posted On: 23 Jan 2009 09:33 AM

here it is
it is still possible that we installed the system on php4 and then upgraded to php5
in any case it's still good to investigate before i have to re-install the whole thing :(
kindly

can you please provide me with the account which you are seeing this?

Thanks,

The message came through without an account name.

here it is
it is still possible that we installed the system on php4 and then upgraded to php5
in any case it's still good to investigate before i have to re-install the whole thing :(
kindly    
Posted On: 23 Jan 2009 09:46 AM
hi
sorry
actually there's only 1 account on this server

Posted On: 23 Jan 2009 09:51 AM
Hello, hotelboo is not an account your server however hostelbo. Is this what you meant? Please also provide the domain name as we will create a phpinfo file to be sure it is running 5+
Thanks,

sorry again really...
i supplied wrong IP for the server

Posted On: 23 Jan 2009 10:07 AM
Hello, Your server has the php5 add-on installed. I just added it to the .htaccess. Please check the status now and let us know.
Thanks,

Posted On: 23 Jan 2009 01:09 PM
hi,
sorry
while trying to check on php from whm, I launched the available upgrade of Cpanel there by mistake
now I'm on Main >> Software >> EasyApache (Apache Update) and I don't know at all what settings to put in there
is it possible that you look at it for me before i do more mistakes please

Actually I did that because I was still seeing php 4.8 on the frontend, but I guess I'll come back to that later

Posted On: 23 Jan 2009 01:34 PM

no, sorry, still getting this: PHP Version:


4.4.8
Hello, Your server has the php5 add-on installed. I just added it to the .htaccess. Please check the status now and let us know.

Thanks,

Posted On: 23 Jan 2009 01:43 PM
I've added the php5 add on. It will show as php4 and act as php5.2.
Thanks,
Posted On: 23 Jan 2009 02:10 PM
hi
thanks
but actually an application i want to install there requires php5 to run and at install it still detects php 4 rather than php 5
Rob H.     
Posted On: 23 Jan 2009 02:12 PM
We can update your VPS to php5.2. Can you verify the last 4 digits of your credit card? This is to verify you are the account holder.

If you pay with paypal, please provide your paypal email address, date of last payment, and the amount you paid.
Thanks,
Posted On: 23 Jan 2009 02:16 PM
yes, please upgrade to latest version of php5
6291 is my credit card number
Matt G.     
Posted On: 23 Jan 2009 02:55 PM
Greetings,

I am starting on this now and will update you soon.

Posted On: 23 Jan 2009 03:57 PM
Greetings,

This has been completed.

Please let us know if we can be of further assistance.


Posted On: 23 Jan 2009 11:24 PM
hi
thanks for upgrade
now I can't open the website though, i get option to download the page instead (see attachement)
I think it's maybe because of .htaccess line: AddType application/x-httpd-php5 .php

but i seem unable to update the file (it's on 444)
but then i seem unable to update the file authorisations using cpanel...
so I'm stuck... I don't want to try to change authorisation through ssh because I'd like to understand why i can't work on cpanel file manager for that
thanks if you can tell me where i'm wrong
Kinldy

Attachments  hfw_secure2.JPG (99.49 KB)
Posted On: 23 Jan 2009 11:48 PM
Hello,

The file ownerships on .htaccess are incorrect, they should be hotelboo:hotelboo not cpanelhorde:cpanelhorde. I've fixed this, so you can edit the file. And yes, it's that AddType line that's breaking things: you can remove it.

Posted On: 24 Jan 2009 12:14 AM
hi,
it's opening now, thanks
but I'm having another issue with the new PHP configuration
I thought that when Apache suEXEC is on, then i should be able to run all apps without having to use chmod 777 for folders but rather 755

well now it's not the case... strangely now this application requires me to go on chmod 777 on a certain folder
is that normal?
Posted On: 24 Jan 2009 12:26 AM
Hello,

suexec only applies to CGI scripts. PHP scripts executed under mod_php run as the UID of the web server (i.e. "nobody"). suPHP is required for suexec-like behaviour with PHP.

ok
but I thought that this server was already setup in that way...
I'm very confused about all that...
could you please install the necessary suPHP for the php 4 and php 5 please
(... and I guess I'll have to look at these requirements again)
Posted On: 24 Jan 2009 12:36 AM
in progress, please hold on.



all set, http://securehotelbooking.com/ is served by suPHP + PHP now.


Best regards,
Hi,
thanks a lot, I'm going to check that out now but please tell me if you know why these settings have gone?
we set that server with all these things already a year ago... I don't understand why it's gone really... other things like tweak settings are still there though...
Kindly
Matthieu

all set, http://securehotelbooking.com/ is served by suPHP + PHP now.






Boris S.     
Posted On: 24 Jan 2009 08:16 AM

not sure, the PHP before the one I have rebuilt was built without suPHP.

Anyway I have saved the EasyApache profile as HFW_2.2_suPHP in WHM >> Main >> Software >> EasyApache (Apache Update) for future rebuilds.



Thanks
I'm having a new issue though
now I'm getting these messages regarding memory:
Fatal error: Allowed memory size of 8388608 bytes exhausted (tried to allocate 311296 bytes)

then the message gives a file name... various names of files for it looks like it's not software related... several parts of the application give the message

I could try to reinstall the application (webiste not yet active) to make sure that it's server related, but i think this app is pretty stable... unless it's been hacked...

bt maybe it's better to inquire first on your side?



not sure, the PHP before the one I have rebuilt was built without suPHP.



Anyway I have saved the EasyApache profile as HFW_2.2_suPHP in WHM >> Main >> Software >> EasyApache (Apache Update) for future rebuilds.




no no don't alter anything, it's a PHP memory_limit, please hold on I'll increase it at once.


Hi,
sorry, but I don't understand what happened with my server here... much of the server configuration has changed

earlier on this ticket it was about PHP 5, suexec suphp that had been changed

Now I can't access fantastico (from hotelboo cpanel), i get message:
"Fantastico is not installed at the default location /usr/local/cpanel/3rdparty/fantastico. Either move the Fantastico directory from it's current location to /usr/local/cpanel/3rdparty/fantastico OR enable ioncube loaders in WHM -> Tweak settings."

but ioncube loaders are enabled already...
I am positive that I used fantastico many times in the past with this account
many things seem to have changed
we spent a loooooooooong time configurating this VPS last year and looks like it has all changed since then, like if the server had been rebuilt new from scratch or something
please tell me what happened
Posted On: 28 Jan 2009 09:26 AM
Hi,

please hold on, checking.


Best regards,

repaired, Fantastico displays normally now.
Posted On: 06 Feb 2009 05:11 AM
hi
i use this ticket because it's also regarding settings that disappeared from the server...

I need to load mod rewrite and ("verify that mod_rewrite is loaded by PHP / You need to change your Apache web server httpd.conf file")

could you perform that for me please
Thank you
Matthieu

mod_rewrite is compiled in Apache, and it's loaded by default.

Here is a list of compiled in modules:

-bash-3.00# httpd -l
Compiled in modules:
core.c
mod_authn_file.c
mod_authn_default.c
mod_authz_host.c
mod_authz_groupfile.c
mod_authz_user.c
mod_authz_default.c
mod_expires.c
mod_headers.c
mod_ident.c
mod_usertrack.c
mod_unique_id.c
mod_setenvif.c
mod_version.c
mod_proxy.c
mod_proxy_connect.c
mod_proxy_ftp.c
mod_proxy_http.c
mod_proxy_ajp.c
mod_ssl.c
prefork.c
http_core.c
mod_mime.c
mod_status.c
mod_autoindex.c
mod_asis.c
mod_dir.c
mod_imagemap.c
mod_actions.c
mod_speling.c
mod_userdir.c
mod_alias.c
mod_rewrite.c
mod_so.c

Posted On: 06 Feb 2009 07:03 AM
hi
thanks for your help
but according to software doc, i'm supposed to see it listed here (see attachement) or else there's a problem with my server setup (this is a standard joomla system info page)
do you have any idea why that would be please? I also tried with emptying my .htaccess file and got no result either...
thanks if u can help
kindly
Posted On: 06 Feb 2009 07:07 AM

There is no attachment in your last reply.
If it is a screenshot, could you please put it on your account and we will be able to see it online.

This website uses Cookies