[FEATURE REQUEST] open_basedir

[www-lab]

It would be great if there was an option to add/delete open_basedir directive from VirtualHost for each client. I have about 100 clients on server and I have to edit httpd.conf to do that.

php_value open_basedir "/home/username/"

That's all I need

cPanel.net Support Ticket Number:

cPanel.net Support Ticket Number:

[sexy_guy]

What for? I have over 403 clients on one box and never needed it.

cPanel.net Support Ticket Number:

[Marty]

Because somepeople like to secure their boxes and prevent users from using php to open or include any files NOT in their home directory. Just becuase you don't use it, doesn't mean it is not useful.

cPanel.net Support Ticket Number:

[carlgm]

Originally posted by Marty
Because somepeople like to secure their boxes and prevent users from using php to open or include any files NOT in their home directory. Just becuase you don't use it, doesn't mean it is not useful.

cPanel.net Support Ticket Number:

Yes it would be good.
It's not like it would be hard to do.
Well worth while, along with removing the default magic quotes = enabled and enable the disabling of register globals within easyapache.

cPanel.net Support Ticket Number:

[SoftmegUK]

Originally posted by www-lab
It would be great if there was an option to add/delete open_basedir directive from VirtualHost for each client. I have about 100 clients on server and I have to edit httpd.conf to do that.

php_value open_basedir "/home/username/"

That's all I need

cPanel.net Support Ticket Number:

cPanel.net Support Ticket Number:

Have you submitted a feature request because this shouldn't be hard to implement and would be really good

cPanel.net Support Ticket Number:

[haze]

Submitting a feature request to the forums isn't a good way to get action, you should try the official method: http://support.cpanel.net/index.cgi?feature=1

cPanel.net Support Ticket Number:

[silversurfer]

You can also edit the scripts for creation of account to add it by default. It's quite easy to do so. We did it the hardway the first time round, by manually doing it. After that, all new accounts created has that.

cPanel.net Support Ticket Number:

[www-lab]

Originally posted by silversurfer
You can also edit the scripts for creation of account to add it by default. It's quite easy to do so. We did it the hardway the first time round, by manually doing it. After that, all new accounts created has that.

Can you share the info how you did it?

Just submitted feature request

cPanel.net Support Ticket Number:

[dthigpen]

I agree that this was be an excellent feature, and one that I'd definately use.

cPanel.net Support Ticket Number:

[cass]

I think we need more control on what VIRTUAL HOST have ...
not only open_basedir ... but there are maybe lots of things I want to change on every virtual host created...

What about a "VIRTUAL HOST TEMPLATE" ...
so we can just modify what is created on the virtual host ... (I know, it could be done modifying by hand wwwact ...)
but when you update cpanel .... pufff... it's gone.

I would like to have some kind of template we can modify (to add things like open_basedir) to the httpd.conf virtual hosts by default ... without the need to make changes on every update.

Regards.

cPanel.net Support Ticket Number:

[SoftmegUK]

Originally posted by cass

I would like to have some kind of template we can modify (to add things like open_basedir) to the httpd.conf virtual hosts by default ... without the need to make changes on every update.

Great idea!!! Would LOVE it!!! Submit a feature request!

cPanel.net Support Ticket Number:

[LS_Drew]

This is a VERY Necessary feature.

We do need more control over the vhosts in general, but open_basedir would be a great place to start. Also, considering everyone considers Cpanel 'less secure' than other control panels, this is an area that REALLY needs some attention.

Adding all the open_basedir stuff is a real pain in the arse for us!

cPanel.net Support Ticket Number:

[www-lab]

Thanks guys for your support! I'm glad I started this thread

cPanel.net Support Ticket Number:

[silversurfer]

Yes. The problem is that you need to edit it after every update. However since we don't do automatic updates, and only do manual updates once every while, it's not too much a hassle. Afterall, it takes all of a couple of seconds to add it. It is also possible to write a simple script to just insert it.

In any case, for those who are adventurous:

1. pico /scripts/wwwacct
Remember to backup first in case you messed up, although you can easily do an upgrade and get it replaced.

2. Look for
<VirtualHost $ip>
ServerAlias www.$domain $domain
ServerAdmin webmaster\@$domain
DocumentRoot $mnt/$user/public_html
ServerName www.$domain
....

and before

</VirtualHost>

Add

php_admin_value open_basedir $mnt/$user/
php_admin_value upload_tmp_dir $mnt/$user/tmp/
php_admin_value session.save_path $mnt/$user/tmp/

You need the last 2 lines, otherwise, your scripts will all fail as they can't write to the default temp directory usually /tmp

I also edited cpanel3-skel to add a directory tmp which is chmod to 777.

cPanel.net Support Ticket Number:

[www-lab]

Thanks, silversurfer!

cPanel.net Support Ticket Number: