Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

My experience with Apache 2.2, fcgi...

Discussion in 'EasyApache' started by 1ONE, Oct 12, 2007.

  1. 1ONE

    1ONE Member

    Joined:
    Mar 18, 2004
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    151
    Location:
    Croatia
    Hello,


    Yesterday I successfully upgraded Apache from 1.3 to 2.2

    I have manage to build apache with new modules like : new mod_security, mod_bandwith, uniqueid, suphp (replacement for phpsuexec), etc.

    Problems on what I encountered are :

    1. php_flags on users .htaccess - my users can't use php_flags anymore, instead they can place they're own php.ini in public_html (correct me if I'm wrong) and use they're custom php settings. If your users use php_flags it will result Internal server error.

    2. suphp and fcgi - If you are using suphp or fcgi and your users use files chmoded to 777 or 666, you must change files to 644 and folders to 755 or else you will get Internal server error. I have manage to write few lines which will automatically chmod folders and files :

    Files :
    Code:
    REMOVED by MODS as this may break your server, see next post.
    Folders :
    Code:
    find /home/*/public_html -type d -exec chmod 755 {} \;
    3. Mod_security 2 - With apache2 you can add new mod_security module, and you need new rulset since they are changed from version 1. You can find ruleset in attachment. I found this ruleset here on forum, but I can't find link anymore :), so I'm posting it here in my post.

    I had to do those stuff and everything is ok for now. I will replay if I encounter any other problem.

    Please post you experience.
     

    Attached Files:

    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #1 1ONE, Oct 12, 2007
  2. manokiss

    manokiss Well-Known Member

    Joined:
    Mar 31, 2002
    Messages:
    575
    Likes Received:
    0
    Trophy Points:
    316
    hi, thanx to share your experience we havent upgraded yet....let me say that running the command:

    find /home/*/public_html -type f -exec chmod 644 {} \;

    you could skrew up perl scripts, that command will change chmod to any file no matter if is a php or not, you coudl use:

    find /home/*/public_html -name '*.php' -o -name '*.php[34]' -o -name '*.phtml'| xargs chmod -v 644


    About each user php.ini, did you test it? With php suexec is the way that is running but i did read in many other posts that peple upgraded to suphp lost this ability, could you confirm please?

    Also do you run more than php version together?

    Thanx!
     
    #2 manokiss, Oct 12, 2007
  3. 1ONE

    1ONE Member

    Joined:
    Mar 18, 2004
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    151
    Location:
    Croatia
    Tnx.

    I will try this. I'm setting permissions at this moment :rolleyes:

    I don't use php4 for almost a year now, and I have around 900 domains per server.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #3 1ONE, Oct 12, 2007
  4. 1ONE

    1ONE Member

    Joined:
    Mar 18, 2004
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    151
    Location:
    Croatia
    I just encounter one problem. In WHM under "Configure PHP and SuExec" I changed my PHP 5 Handler to fcgi, and now I can't access to hostname/~username for domains that are not pointed to server.

    In my error_log I have this :

    In suexec log I don't have detailed information about this problem. I would appreciate some help :)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #4 1ONE, Oct 13, 2007
    Last edited: Oct 13, 2007
  5. manokiss

    manokiss Well-Known Member

    Joined:
    Mar 31, 2002
    Messages:
    575
    Likes Received:
    0
    Trophy Points:
    316
    Did you open a ticket?, i highly recommend it.
     
    #5 manokiss, Oct 13, 2007
  6. asiams

    asiams Well-Known Member

    Joined:
    May 28, 2003
    Messages:
    89
    Likes Received:
    0
    Trophy Points:
    156
    Location:
    Hokkaido, JAPAN
    How did you fix php flag problem?

    How did you fix the php_flag problem for .htaccess?

    I have same problem and would like to know how you did it?

    Thanks.

    asiams
     
    #6 asiams, Oct 13, 2007
  7. manokiss

    manokiss Well-Known Member

    Joined:
    Mar 31, 2002
    Messages:
    575
    Likes Received:
    0
    Trophy Points:
    316
    You should not use php flags in .htaccess in a suexec php....instead use the php.ini file with the php variables on it.
     
    #7 manokiss, Oct 14, 2007
  8. InterServed

    InterServed Well-Known Member

    Joined:
    Jul 10, 2007
    Messages:
    261
    Likes Received:
    4
    Trophy Points:
    68
    cPanel Access Level:
    DataCenter Provider
    Note that php_flag does not work with Apache 2. Neither does on / off — you must use 0 (off) or 1 (on).

    For example enable register_globals on (apache2) / .htaccess :
    php_value register_globals 1
     
    #8 InterServed, Oct 14, 2007
  9. manokiss

    manokiss Well-Known Member

    Joined:
    Mar 31, 2002
    Messages:
    575
    Likes Received:
    0
    Trophy Points:
    316
    Only if you are running php as a apache module, that do not work in suexec.
     
    #9 manokiss, Oct 14, 2007
  10. katmai

    katmai Well-Known Member

    Joined:
    Mar 13, 2006
    Messages:
    532
    Likes Received:
    0
    Trophy Points:
    166
    Location:
    Brno, Czech Republic
    how about mod_evasive? any ideas if there is anything similar for apache 2.2 ?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #10 katmai, Oct 15, 2007
  11. asiams

    asiams Well-Known Member

    Joined:
    May 28, 2003
    Messages:
    89
    Likes Received:
    0
    Trophy Points:
    156
    Location:
    Hokkaido, JAPAN
    Where can I find php.ini file for each customer?

    Can a customer access to php.ini file from Cpanel?

    If not .htaccess, is this feature safe?

    Where can I find all of the php config features for Apache 2.2?

    Thanks.

    asiams
     
    #11 asiams, Oct 15, 2007
  12. jdlightsey

    jdlightsey Perl Developer III
    Staff Member

    Joined:
    Mar 6, 2007
    Messages:
    126
    Likes Received:
    2
    Trophy Points:
    243
    Location:
    Houston Texas
    cPanel Access Level:
    Root Administrator
    The CGI and FCGI configurations aren't going to work with ~userdir requests without disabling Suexec in the WHM interface and moving the suexec binary away from /usr/local/apache/bin/suexec.

    The FastCGI setup is just a simple baseline configuration that needs to be tweaked for the needs of the server. The CGI setup is intended as a fallback when the other preferrable setups (DSO or SuPHP) aren't options.
     
    #12 jdlightsey, Oct 15, 2007
  13. 1ONE

    1ONE Member

    Joined:
    Mar 18, 2004
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    151
    Location:
    Croatia
    Tnx!

    I'm now using DSO, and I have php_flags in .htaccess!

    If you are using suphp then you have to place php.ini in your public_html. This php.ini must ONLY contains lines that you need example :

    register_globals on
    some_other_value off
    some_other_value2 12M

    user php.ini should not contain "all php.ini" file !

    I'm satisfied with DSO, but I can't see what my users are doing :) Is there any fix for this in DSO mode?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #13 1ONE, Oct 16, 2007
  14. vittle

    vittle Member

    Joined:
    Apr 18, 2004
    Messages:
    10
    Likes Received:
    0
    Trophy Points:
    151
    We have PHP compiled as a FastCGI with phpsuexec and suexec enabled, but Apache is v1.3.3.9... and the hostname/~username works... thus, how come it won't work in the new Apache 2 version, did something else change?
     
    #14 vittle, Oct 16, 2007
  15. PPNSteve

    PPNSteve Well-Known Member

    Joined:
    Mar 13, 2003
    Messages:
    404
    Likes Received:
    2
    Trophy Points:
    168
    Location:
    Somewhere in Ilex Forest
    cPanel Access Level:
    Root Administrator
    Twitter:
    OK tried that mod_security rule set you posted, and apache wouldn't restart.. not sure why (or which rule was crashing it.)

    Anyone else have a WORKABLE and good 2.0 ruleset for a production cPanel box?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #15 PPNSteve, Oct 16, 2007
  16. stormrider

    stormrider Member

    Joined:
    Jan 12, 2007
    Messages:
    23
    Likes Received:
    0
    Trophy Points:
    151
    Sorry for posting after 3 months but this topic talks exactly about what i need.

    I'm just checking if someone know how to find php_flags on .htaccess files and tell where this .htaccess are.

    So i'll able to make this changes for my users instead of letting their site down.

    Thanks.
     
    #16 stormrider, Jan 31, 2008
  17. dexus

    dexus Well-Known Member

    Joined:
    Jan 14, 2006
    Messages:
    170
    Likes Received:
    0
    Trophy Points:
    166
    cPanel Access Level:
    Root Administrator
    You can use following command...

    Code:
    find /home -name '.htaccess' -exec grep -i 'php_' {} \; -print
     
    #17 dexus, Feb 3, 2008
(You must log in or sign up to post here.)
Loading...
Similar Threads - experience Apache fcgi
  1. Norman Cates

    Does anyone have experience installing Mailman 3 along side cPanel

    Norman Cates, Feb 24, 2018, in forum: E-mail Discussion
    Replies:
    3
    Views:
    288
    Infopro
    Apr 1, 2018
  2. cPAlex

    WordPress experience research

    cPAlex, Aug 1, 2017, in forum: General Discussion
    Replies:
    0
    Views:
    302
    cPAlex
    Aug 1, 2017
  3. postcd

    CXS (Config Server) experience?

    postcd, Jul 30, 2017, in forum: Security
    Replies:
    3
    Views:
    646
    zoner
    Aug 1, 2017
  4. EneaXH

    PHP accelerator, any experience ?

    EneaXH, Jul 4, 2017, in forum: Workarounds and Optimization
    Replies:
    3
    Views:
    926
    cPanelMichael
    Jul 5, 2017
  5. postcd

    SOLVED Peer reports it experienced an internal error. Error code: SSL_ERROR_INTERNAL_ERROR_ALERT

    postcd, Feb 25, 2017, in forum: Security
    Replies:
    5
    Views:
    3,511
    cPanelMichael
    Apr 6, 2017

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice