Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Enabling PHP-FPM forces disable_functions

Discussion in 'EasyApache' started by AndyX, Jan 18, 2017.

Tags:
Page 1 of 2
  1. AndyX

    AndyX Active Member

    Joined:
    Sep 25, 2015
    Messages:
    35
    Likes Received:
    6
    Trophy Points:
    8
    Location:
    Los Altos, CA
    cPanel Access Level:
    Website Owner
    WHM 60.0 (build 35)
    PHP Version: ea-php71

    When I enable PHP-FPM

    pic001.jpg

    When I disable PHP-FPM

    pic002.jpg

    Is there any way to enable PHP-FPM without disabling the following functions:

    exec,passthru,shell_exec,system
     
    #1 AndyX, Jan 18, 2017
  2. sparek-3

    sparek-3 Well-Known Member

    Joined:
    Aug 10, 2002
    Messages:
    1,601
    Likes Received:
    64
    Trophy Points:
    328
    cPanel Access Level:
    Root Administrator
    I'm not entirely sure that cPanel's PHP-FPM adaption is ready for primetime.

    You will want to read through:

    PHP-FPM and EasyApache 4 - Documentation - cPanel Documentation

    cPanel's PHP-FPM is adding those disabled functions by default. You can adjust this, system-wide by modifying/creating the file at:

    /var/cpanel/ApachePHPFPM/system_pool_defaults.yaml

    Or you can set this per VirtualHost using the file:

    /var/cpanel/userdata/[user]/[domain].php-fpm.yaml

    and adjust the disable_functions for that specific pool.

    All of this gets exceedingly complicated in a per VirtualHost pool setup. I have real reservations over whether cPanel's decision to use a per-VirtualHost FPM pool is the way to go. I think a per-user FPM pool would be a lot simplier. And the system for doing this is all a bit convoluted at this stage.

    Perhaps the cPanel PHP-FPM system will all come together at some point. Perhaps a per-VirtualHost FPM pool will make more sense then. But the system as it stands right now, to me, leaves a bit to be desired.
     
    #2 sparek-3, Jan 18, 2017
  3. AndyX

    AndyX Active Member

    Joined:
    Sep 25, 2015
    Messages:
    35
    Likes Received:
    6
    Trophy Points:
    8
    Location:
    Los Altos, CA
    cPanel Access Level:
    Website Owner
    Hi sparek-3,

    Thank you for your help.

    Sounds like I will need to create a folder called ApachePHPFPM located here:

    /var/cpanel/ApachePHPFPM

    Then create a file called:

    /var/cpanel/ApachePHPFPM/system_pool_defaults.yaml

    Then in that file enter:

    Code:
    disable_functions =
    Is this all correct?
     
    #3 AndyX, Jan 18, 2017
  4. AndyX

    AndyX Active Member

    Joined:
    Sep 25, 2015
    Messages:
    35
    Likes Received:
    6
    Trophy Points:
    8
    Location:
    Los Altos, CA
    cPanel Access Level:
    Website Owner
    #4 AndyX, Jan 18, 2017
    Last edited: Jan 19, 2017
  5. AndyX

    AndyX Active Member

    Joined:
    Sep 25, 2015
    Messages:
    35
    Likes Received:
    6
    Trophy Points:
    8
    Location:
    Los Altos, CA
    cPanel Access Level:
    Website Owner
    I tried creating the file as I outlined in post #3, but that caused problems, when I switched to PHP-FPM is would no longer show my domain at the bottom of the page.
     
    #5 AndyX, Jan 18, 2017
  6. sparek-3

    sparek-3 Well-Known Member

    Joined:
    Aug 10, 2002
    Messages:
    1,601
    Likes Received:
    64
    Trophy Points:
    328
    cPanel Access Level:
    Root Administrator
    I believe it should be:

    Code:
    ---
php_admin_value_disable_functions = { present_ifdefault: 0 }
    Keep in mind though, this is going to enable all functions for every account that uses PHP-FPM

    Sorry, think my original post was wrong, I think this is right. I have edited this post.
     
    #6 sparek-3, Jan 18, 2017
  7. AndyX

    AndyX Active Member

    Joined:
    Sep 25, 2015
    Messages:
    35
    Likes Received:
    6
    Trophy Points:
    8
    Location:
    Los Altos, CA
    cPanel Access Level:
    Website Owner
    When I put that code into the system_pool_defaults.yaml file and enabled PHP-FPM I got the following error when I reloaded my XenForo forum:

    upload_2017-1-19_8-48-33.png
     
    #7 AndyX, Jan 19, 2017
  8. AndyX

    AndyX Active Member

    Joined:
    Sep 25, 2015
    Messages:
    35
    Likes Received:
    6
    Trophy Points:
    8
    Location:
    Los Altos, CA
    cPanel Access Level:
    Website Owner
    #8 AndyX, Jan 19, 2017
  9. AndyX

    AndyX Active Member

    Joined:
    Sep 25, 2015
    Messages:
    35
    Likes Received:
    6
    Trophy Points:
    8
    Location:
    Los Altos, CA
    cPanel Access Level:
    Website Owner
    @sparek-3

    In the code you posted, you have --- on the fist line, is by accident or is it needed?
     
    #9 AndyX, Jan 19, 2017
  10. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,782
    Likes Received:
    1,712
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    The following document includes information on how to change the default configuration values with PHP-FPM on EA4:

    PHP-FPM and EasyApache 4 - Documentation - cPanel Documentation

    In particular, this is the file path to edit for a specific domain name:

    Code:
    /var/cpanel/userdata/[user]/[domain].php-fpm.yaml
    Otherwise, review the paths under "Optional files" if you wish to to change the default parameters. Also, the following document provides information about how to formulate the custom entries:

    Configurations Values of PHP-FPM - Documentation - cPanel Documentation

    After making those changes to the YAML file on a specific domain name, run the following command:

    Code:
    /scripts/php_fpm_config --rebuild --domain=domain
    This script is documented at:

    The php_fpm_config Script - Documentation - cPanel Documentation

    Thank you.
     
    #10 cPanelMichael, Jan 19, 2017
    Del Drago likes this.
  11. AndyX

    AndyX Active Member

    Joined:
    Sep 25, 2015
    Messages:
    35
    Likes Received:
    6
    Trophy Points:
    8
    Location:
    Los Altos, CA
    cPanel Access Level:
    Website Owner
    How come when I try to run the command I get "command not found" message?

    upload_2017-1-20_9-50-45.png
     
    #11 AndyX, Jan 20, 2017
  12. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,782
    Likes Received:
    1,712
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    The full path to the script is required in the command:

    Code:
    /scripts/php_fpm_config
    Thanks!
     
    #12 cPanelMichael, Jan 20, 2017
  13. AndyX

    AndyX Active Member

    Joined:
    Sep 25, 2015
    Messages:
    35
    Likes Received:
    6
    Trophy Points:
    8
    Location:
    Los Altos, CA
    cPanel Access Level:
    Website Owner
    Thank you, Michael.

    So far so good, I ran the script and my server is still running.

    upload_2017-1-20_10-2-13.png

    Now I will need to make the changes to the .yaml

    Code:
    /var/cpanel/ApachePHPFPM/system_pool_defaults.yaml
    and run the script again. I'm still not clear if the first line should have a --- or that was a mistake.

    Code:
    ---
php_admin_value_disable_functions = { present_ifdefault: 0 }
     
    #13 AndyX, Jan 20, 2017
  14. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,782
    Likes Received:
    1,712
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    Yes, that should be the first line. Information on YAML files is also available at:

    YAML - Wikipedia

    Thanks!
     
    #14 cPanelMichael, Jan 20, 2017
  15. AndyX

    AndyX Active Member

    Joined:
    Sep 25, 2015
    Messages:
    35
    Likes Received:
    6
    Trophy Points:
    8
    Location:
    Los Altos, CA
    cPanel Access Level:
    Website Owner
    I followed all the steps:

    1) Created a ApachePHPFPM folder and system_pool_defaults.yaml file.

    pic001.jpg

    2) The system_pool_defaults.yaml file contains:

    pic002.jpg

    3) Ran the script:

    /scripts/php_fpm_config --rebuild --domain=example.com

    Of course instead of using example.com I used my domain.

    4) Applied PHP-FPM

    pic003.jpg

    And the result is a server error when I try to view my server in the browser:

    pic004.jpg

    Looking at my error_log file I have many lines similar to this:

    pic005.jpg
     
    #15 AndyX, Jan 20, 2017
    Last edited: Jan 21, 2017
  16. AndyX

    AndyX Active Member

    Joined:
    Sep 25, 2015
    Messages:
    35
    Likes Received:
    6
    Trophy Points:
    8
    Location:
    Los Altos, CA
    cPanel Access Level:
    Website Owner
    Looking at the following error.log file:

    /opt/ea-php71/root/usr/var/log/php-fpm/error.log

    pic001.jpg

    I have never tried setting any pool, could that be the problem?
     
    #16 AndyX, Jan 21, 2017
  17. AndyX

    AndyX Active Member

    Joined:
    Sep 25, 2015
    Messages:
    35
    Likes Received:
    6
    Trophy Points:
    8
    Location:
    Los Altos, CA
    cPanel Access Level:
    Website Owner
    I was never able to solve this issue.
     
    #17 AndyX, Jan 23, 2017
  18. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,782
    Likes Received:
    1,712
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    Please revert any modifications you have made and let us know if the steps outlined below are helpful:

    1. Create the /var/cpanel/ApachePHPFPM directory:

    Code:
    mkdir /var/cpanel/ApachePHPFPM
    2. Create the /var/cpanel/ApachePHPFPM/system_pool_defaults.yaml file:

    Code:
    touch /var/cpanel/ApachePHPFPM/system_pool_defaults.yaml
    3. Edit /var/cpanel/ApachePHPFPM/system_pool_defaults.yaml using your preferred text editor (e.g. vi, nano) so that it looks exactly like this:

    Code:
    php_admin_value_disable_functions : passthru,system
    In this example, "passthru,system" are left as disabled functions. No other lines exist before or after this entry in this file.

    4. Regenerate the PHP-FPM configuration files via:

    Code:
    /scripts/php_fpm_config --rebuild
    Thank you.
     
    #18 cPanelMichael, Jan 24, 2017
    linux4me2 and CyclingTribe like this.
  19. Floyd R Turbo

    Floyd R Turbo Member

    Joined:
    Jul 30, 2015
    Messages:
    18
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    West Des Moines, IA
    cPanel Access Level:
    Root Administrator
    'sup @AndyX! Were you able to fix this? I'm hitting the same issue after bumping to php7 and php-fpm
     
    #19 Floyd R Turbo, Aug 13, 2017
  20. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,782
    Likes Received:
    1,712
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Do the instructions in my last response to this thread help?

    Thank you.
     
    #20 cPanelMichael, Aug 14, 2017
(You must log in or sign up to post here.)
Page 1 of 2
Loading...
Similar Threads - Enabling forces disable_functions
  1. Railander

    Enabling DKIM for root account

    Railander, Apr 24, 2018 at 2:06 PM, in forum: E-mail Discussions
    Replies:
    2
    Views:
    35
    Railander
    Apr 24, 2018 at 3:30 PM
  2. VisHype

    Enabling Temporary Links and .htaccess Rewrite Rules

    VisHype, Apr 22, 2018 at 11:48 AM, in forum: General Discussion
    Replies:
    1
    Views:
    49
    cPanelMichael
    Apr 23, 2018 at 10:26 AM
  3. thanasis

    SOLVED Enabling Jail Apache issue

    thanasis, Feb 6, 2018, in forum: Security
    Replies:
    2
    Views:
    236
    thanasis
    Feb 7, 2018
  4. TechStar1

    Enabling mod_userdir question

    TechStar1, Jan 7, 2018, in forum: EasyApache
    Replies:
    3
    Views:
    503
    cPanelMichael
    Jan 8, 2018
  5. Netsoft

    Enabling http/2 question

    Netsoft, Oct 12, 2017, in forum: EasyApache
    Replies:
    3
    Views:
    574
    cPanelMichael
    Oct 27, 2017

Share This Page