[PHP] dns lookups only half working in chroot

Hey guys, I am cross-posting this to the PHP and the PHP-FPM lists, because both are applicable in my opinion. I have got a strange problem with my php-fpm chrooted PHP environment. PHP is chrooted to /var/www/. /var/www/etc looks like this: # ls -al /var/www/etc/ insgesamt 20 drwxr-xr-x 2 ro

Re: [PHP] Re: Instantiate SOAP Request Objects

Am 01.06.2009 20:05 Uhr, schrieb Shawn McKenzie: Shawn McKenzie wrote: Samuel Vogel wrote: Hey, I would like to know how I can instantiate the types that I get via the __getTypes() function or know if this is even possible. I am asking because I have a webservice in which all

[PHP] Instantiate SOAP Request Objects

Hey, I would like to know how I can instantiate the types that I get via the __getTypes() function or know if this is even possible. I am asking because I have a webservice in which all functions expect an specific object to be passed to them, rather than a list of arguments. And I am hoping t

Re: [PHP] Weird Zend IDE Issue

Richard Lynch schrieb: On Sun, March 2, 2008 11:07 pm, Steve Finkelstein wrote: Hi all, I know this isn't a forum for Zend IDE, but since there's probably a decent population here using it, I figured I'd ask away. I'm using 5.5.1 Professional on Mac OSX 10.5.2. My issue here is that all le

Re: [PHP] problem with url_fopen on free hosting environment

'{print $6}' | awk ' BEGIN { FS = "<" } { print $1 } '` iptables -A INPUT -s $ownip -p tcp --dport 80 -j DROP iptables -A INPUT -s $ownip -p tcp --dport 443 -j DROP Maybe this helps somebody :) Regards, Samy Samuel Vogel schrieb: Thanks for the infos. I read

Re: [PHP] problem with url_fopen on free hosting environment

Thanks for the infos. I read through the very interesting post, but I did not find it to be a solution for my problem. I tried to limit connections with iptables, but it did not work out. I'm not an expert at this, I tried like it is described here: http://www.linux-noob.com/forums/index.php?sh

Re: [PHP] problem with url_fopen on free hosting environment

, FL 33308 | TEL 954-607-4207 | FAX 954-337-2695 Email: [EMAIL PROTECTED] | MSN Chat: [EMAIL PROTECTED] | SKYPE: bestplace | Web: http://www.bestplace.biz | Web: http://www.seo-diy.com -Original Message- From: Samuel Vogel [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 27, 2007

[PHP] problem with url_fopen on free hosting environment

Hey guys, I am running an free hosting environment and do have some trouble with allow_url_fopen. Right now we prohibit this, but it's requested by many of our users. The problem is something like to following script, which calls itself over and over again, being run on our server: http://dom

Re: [PHP] Chmod a Directory

You will have to loop through the directory recursively, running chmod() on every file there is! Regards, Samy abderrazzak nejeoui schrieb: Please how can i chmod a directory to 0777 i tried chmod ($myDirectory, 0777); but nothing happens thanks in advence Nejeoui -- PHP General Mailing

Re: [PHP] blocking exec() silently

Actually I can not do that. The point of my question was, that I'm running kilu.de, a German Freehosting service. But many of our users can not cope with the error messages, occurring from the disabled_functions! I can't log to the error log, because the errors need to be displayed to our use

Re: [PHP] blocking exec() silently

you dont get to just change some things and not others. Note: this from the handbook: It is important to remember that the standard PHP error handler is completely bypassed. -nathan On 9/13/07, Samuel Vogel <[EMAIL PROTECTED]> wrote: Hey, Thanks for the replies! safe-mode is not a

Re: [PHP] blocking exec() silently

Hey, Thanks for the replies! safe-mode is not an option unfortunately! But changing the Error reporting, is the first thing I wanted to do, but when I asked if this was possible on this list, somebody replied, that it this is not possible! Could you point me to a way, how I can achieve, that

Re: [PHP] GD Library

I would point you to MAMP: http://www.mamp.info/ It's like Xampp but designed all for a Mac... Easy to install, to configure and to user ;) Regards, Samy Greg Donald schrieb: On Thu, 13 Sep 2007, Steve Marquez wrote: I am running PHP 4.4.7 without the GD Library and need it to run. I am v

[PHP] blocking exec() silently

Hey guys, Actually I'm still looking for a way to block for example the exec() function without throwing an error! Since there seems to be no way to do this, without hacking the code of php, it seems like that is what I'll have to do... Do you people think it would be a good way to just look

Re: [PHP] looking for the right mcrypt ciphers

I solved the problem using bin2hex()! Regards, Samy Samuel Vogel schrieb: Hey guys, I'm wondering which mcrypt cipher will provide me with an encryted string, that can afterwards be encrypted again and is transverable without problems through an link in an e-mail. I would like to en

[PHP] looking for the right mcrypt ciphers

Hey guys, I'm wondering which mcrypt cipher will provide me with an encryted string, that can afterwards be encrypted again and is transverable without problems through an link in an e-mail. I would like to encrypt some piece of information (up to 25 characters) and send it to the user in an e

Re: [PHP] using disable_functions silently

That'd be at least some kind of a solution. I'm thinking of overwriting the functions I want to block with one, that just returns true and does nothing. How would I do that? Jay Blanchard schrieb: [snip] Unfortunately we would need a solution without changing the PHP code of our users. No way

Re: [PHP] using disable_functions silently

Unfortunately we would need a solution without changing the PHP code of our users. No way to do that? Regards, Samy Chris schrieb: Samuel Vogel wrote: I would like to know, if there is any way, to use disable_functions silently. We are running an shared hosting environment and therefore

[PHP] using disable_functions silently

I would like to know, if there is any way, to use disable_functions silently. We are running an shared hosting environment and therefore forbid the use of exec() etc. Many of our users, just seem to be to dumb to comment out exec() in phpBB etc. Since removing the exec()-calls works fine, is t

Re: [PHP] ini_set() security question

I don't think it should be allowed. A comment from the ini_set page [1]: "If you set something using php_admin_value in httpd.conf it is then not possible to be set the value at runtime, even if it's NOT PHP_INI_SYSTEM. " So, I guess it must be a bug. Tijnema [1] http://www.php.net/manual/en/

Re: [PHP] ini_set() security question

e not already on current PHP versions. On Thu, May 31, 2007 2:46 pm, Samuel Vogel wrote: There is no bug filed for this. There is only one older bug ( http://bugs.php.net/bug.php?id=38804 ) which makes me think overwriting with ini_set() shouldn't be possible! Richard Lynch schrieb: O

Re: [PHP] ini_set() security question

There is no bug filed for this. There is only one older bug ( http://bugs.php.net/bug.php?id=38804 ) which makes me think overwriting with ini_set() shouldn't be possible! Richard Lynch schrieb: On Wed, May 30, 2007 3:34 pm, Samuel Vogel wrote: And what happens if you try to alloca

Re: [PHP] ini_set() security question

Hi! Show us your test code? /etc/apache2/httpd.conf : php_admin_value memory_limit 3145728 iniset_test.php : new: ".$new; ?> The result is the following: old: 3145728 new: 20971520 -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] ini_set() security question

And what happens if you try to allocate 3M of data? $foo = str_repeat('.', 3145728); Nothing. It does it without any errors. I can allocate up to 20MB (well a little bit less of course). Regards, Samy -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php

Re: [PHP] ini_set() security question

Hello, I would like to allow the users to ini_set(), while disabling the risky options with php_admin_flag/value! I don't think php_admin_* can be over-ridden -- that's kinda the whole point of that. The Problem is, that i can be overwritten using ini_set()... I just found that out by t

[PHP] ini_set() security question

I would be very interested in knowing which options, that are accessible with PHP_INI_ALL or PHP_INI_PERDIR, could be risky to allow on a shared hosting server. I would like to allow the users to ini_set(), while disabling the risky options with php_admin_flag/value! Stuff like 'memory_limit'