PDA

View Full Version : High security Sites?


PeterTable
2003-11-06, 10:35 AM
Hello

I recently got my server upgraded from 3.1.x to 3.5.20 and have a pair of questions:
What does High security Sites really mean?

I previously installed a suexec hack to make all CGIs run chrooted and also another hack to safely disable PHP Safe mode

suexec hack:
http://ensim.webscorpion.com/modules.php?name=News&file=article&sid=8&mode=&order=0&thold=0

PHP safemode hack:
http://ensim.webscorpion.com/modules.php?name=News&file=article&sid=16

Question:
Does this hacks are the same as ensims "High Security Sites'???

thanks

Buckaroo
2003-11-17, 11:57 AM
High security sites use a chrooted suexec implementation. This means all CGI are run jailed into the site's filesystem. The safe mode hack is not implemented, however, with high security sites, php is forced to run as CGI mode, this bypasses the need for safe mode or safe mode hacks. Suexec is safer and produces less compatibility issues than php safe_mode as the cgi runs as the user. With php_safe mode, the script is still running as apache.

jspiker
2003-11-17, 23:18 PM
When I switched to high security mode I could no longer connect to my database. What is my new mySQLserver, mySQLuser, mySQLpassword information? As of now I get:

CRITICAL_ERROR:
Line : generic, class2.php

Error reported as: [6]: Unable to form a valid connection to mySQL. Please check that your e107_config.php contains the correct information.

Buckaroo
2003-11-18, 11:58 AM
What version of webppliance and what is in the e107_config.php file?

If this is webppliance 3.5.19 or less, then most likely you just need to change the hostname value for connection from 'localhost' to '127.0.0.1'. This particular bug is fixed in 3.5.20 webppliance, provided the appliance admin has restarted mysql to complete the upgrade.

jspiker
2003-11-18, 14:49 PM
Thanks that worked. However, I thought that would turn php safe mode off. I have invision power board and would like to install a new skin. When I had it on low security I could not install new skins because safe mode was on. Now I cant even see the skin to update. How do I turn safe mode off? Thanks