Forums / Setup & design / Suhosin & eZPublish

Suhosin & eZPublish

Author Message

Philippe VINCENT-ROYOL

Tuesday 22 December 2009 7:07:12 am

Hello,

I would like to install php5-suhosin package, on debian server with eZPublish. But i've just a little problem: i've always an ezpublish error when trying to load website:

Fatal error: eZ Publish did not finish its request

The execution of eZ Publish was abruptly ended, the debug output is present below.

Trying to check on log file, but nothing appears..

Its strange because i dont have this problem on specific website (without ez)

Dont know what to change or do to run suhosin with eZ

I use eZPublish 4.2 with,

PHP 5.2.11-0.dotdeb.1 with Suhosin-Patch 0.9.7 (cli) (built: Sep 20 2009 09:41:43)
Copyright (c) 1997-2009 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2009 Zend Technologies
with eAccelerator v0.9.5.2, Copyright (c) 2004-2006 eAccelerator, by eAccelerator
with Suhosin v0.9.29, Copyright (c) 2007, by SektionEins GmbH

Thanks

Certified Developer (4.1): http://auth.ez.no/certification/verify/272607
Certified Developer (4.4): http://auth.ez.no/certification/verify/377321

G+ : http://plus.tl/dspe
Twitter : http://twitter.com/dspe

Jérôme Vieilledent

Tuesday 22 December 2009 8:10:23 am

Hi Philippe

Do the log say something (eZ Publish, Apache, PHP) ? Try to regenerate autoloads

Steven E. Bailey

Tuesday 22 December 2009 11:33:12 am

I'm running the php5-suhosin package on a debian dev machine as a module (and compiled in on other machines) and it works - I've found sometimes suhosin will fatal a process that would otherwise only throw a warning. I see this especially with cli things throwing canary efree errors... but depending on your setup - if you don't display php errors you might end up getting blank pages because of errors that you otherwise would ignore.

Certified eZPublish developer
http://ez.no/certification/verify/396111

Available for ezpublish troubleshooting, hosting and custom extension development: http://www.leidentech.com

Philippe VINCENT-ROYOL

Wednesday 23 December 2009 1:29:03 am

Hi Jérôme,

I try this morning again.. clear all cache, restart apache, clear all logs.. i've classical log via eZPublish and juste discover this log on error.log via apache2:

[Wed Dec 23 10:23:26 2009] [notice] Apache/2.2.9 (Debian) PHP/5.2.11-0.dotdeb.1 with Suhosin-Patch mod_ssl/2.2.9 OpenSSL/0.9.8g configured -- resuming normal operations
[Wed Dec 23 10:23:30 2009] [error] [client 10.0.1.172] ALERT - Include filename ('compress.zlib://var/cache/template/compiled/accueil-11849b87506e2c680bfb48fd184d07a8.php') is an URL that is not allowed (attacker '10.0.1.172', file '/var/www/ezpublish/lib/eztemplate/classes/eztemplatecompiler.php', line 447)
[Wed Dec 23 10:23:30 2009] [error] [client 10.0.1.172] ALERT - Include filename ('compress.zlib://var/cache/template/compiled/debug_toolbar-10f724bfab50caab95b70d940c6854fd.php') is an URL that is not allowed (attacker '10.0.1.172', file '/var/www/ezpublish/lib/eztemplate/classes/eztemplatecompiler.php', line 447)

10.0.1.172 is my local ip. Have u ever seen this message?

HI Steven,

I display all errors and warning via apache2 and cli. Maybe a problem with dotdeb package... dont know.. I ll search more :)

Thanks

Certified Developer (4.1): http://auth.ez.no/certification/verify/272607
Certified Developer (4.4): http://auth.ez.no/certification/verify/377321

G+ : http://plus.tl/dspe
Twitter : http://twitter.com/dspe

Jérôme Vieilledent

Wednesday 23 December 2009 5:17:32 am

Hi Philippe

Quick silly question : is zlib extension available on your PHP configuration ?

Jérôme Vieilledent

Wednesday 23 December 2009 5:19:28 am

Also, it seems that you activated template compression, did you ? In that cas, try to turn it off (and you'll also have better performance)

Philippe VINCENT-ROYOL

Wednesday 23 December 2009 6:03:38 am

oh damn.. template compression was on true and zlib was on off..

thanks for ur help :)

Certified Developer (4.1): http://auth.ez.no/certification/verify/272607
Certified Developer (4.4): http://auth.ez.no/certification/verify/377321

G+ : http://plus.tl/dspe
Twitter : http://twitter.com/dspe

Jérôme Vieilledent

Wednesday 23 December 2009 7:02:01 am

You're welcome :)

eZ debug

Timing: Jan 17 2025 23:48:20
Script start
Timing: Jan 17 2025 23:48:20
Module start 'content'
Timing: Jan 17 2025 23:48:22
Module end 'content'
Timing: Jan 17 2025 23:48:22
Script end

Main resources:

Total runtime1.4159 sec
Peak memory usage4,096.0000 KB
Database Queries211

Timing points:

CheckpointStart (sec)Duration (sec)Memory at start (KB)Memory used (KB)
Script start 0.00000.0051 587.6094180.8438
Module start 'content' 0.00511.2605 768.4531665.7734
Module end 'content' 1.26550.1503 1,434.2266345.0859
Script end 1.4158  1,779.3125 

Time accumulators:

 Accumulator Duration (sec) Duration (%) Count Average (sec)
Ini load
Load cache0.00370.2606210.0002
Check MTime0.00130.0948210.0001
Mysql Total
Database connection0.00060.043610.0006
Mysqli_queries1.305292.18682110.0062
Looping result0.00260.18662090.0000
Template Total1.382797.720.6913
Template load0.00180.127120.0009
Template processing1.380997.529020.6904
Template load and register function0.00020.010810.0002
states
state_id_array0.00140.096110.0014
state_identifier_array0.00180.125920.0009
Override
Cache load0.00160.1143520.0000
Sytem overhead
Fetch class attribute can translate value0.00120.084240.0003
Fetch class attribute name0.00110.0747110.0001
XML
Image XML parsing0.00180.129340.0005
class_abstraction
Instantiating content class attribute0.00000.0022160.0000
General
dbfile0.00270.1926420.0001
String conversion0.00000.000430.0000
Note: percentages do not add up to 100% because some accumulators overlap

CSS/JS files loaded with "ezjscPacker" during request:

CacheTypePacklevelSourceFiles
CSS0extension/community/design/community/stylesheets/ext/jquery.autocomplete.css
extension/community_design/design/suncana/stylesheets/scrollbars.css
extension/community_design/design/suncana/stylesheets/tabs.css
extension/community_design/design/suncana/stylesheets/roadmap.css
extension/community_design/design/suncana/stylesheets/content.css
extension/community_design/design/suncana/stylesheets/star-rating.css
extension/community_design/design/suncana/stylesheets/syntax_and_custom_tags.css
extension/community_design/design/suncana/stylesheets/buttons.css
extension/community_design/design/suncana/stylesheets/tweetbox.css
extension/community_design/design/suncana/stylesheets/jquery.fancybox-1.3.4.css
extension/bcsmoothgallery/design/standard/stylesheets/magnific-popup.css
extension/sevenx/design/simple/stylesheets/star_rating.css
extension/sevenx/design/simple/stylesheets/libs/fontawesome/css/all.min.css
extension/sevenx/design/simple/stylesheets/main.v02.css
extension/sevenx/design/simple/stylesheets/main.v02.res.css
JS0extension/ezjscore/design/standard/lib/yui/3.17.2/build/yui/yui-min.js
extension/ezjscore/design/standard/javascript/jquery-3.7.0.min.js
extension/community_design/design/suncana/javascript/jquery.ui.core.min.js
extension/community_design/design/suncana/javascript/jquery.ui.widget.min.js
extension/community_design/design/suncana/javascript/jquery.easing.1.3.js
extension/community_design/design/suncana/javascript/jquery.ui.tabs.js
extension/community_design/design/suncana/javascript/jquery.hoverIntent.min.js
extension/community_design/design/suncana/javascript/jquery.popmenu.js
extension/community_design/design/suncana/javascript/jScrollPane.js
extension/community_design/design/suncana/javascript/jquery.mousewheel.js
extension/community_design/design/suncana/javascript/jquery.cycle.all.js
extension/sevenx/design/simple/javascript/jquery.scrollTo.js
extension/community_design/design/suncana/javascript/jquery.cookie.js
extension/community_design/design/suncana/javascript/ezstarrating_jquery.js
extension/community_design/design/suncana/javascript/jquery.initboxes.js
extension/community_design/design/suncana/javascript/app.js
extension/community_design/design/suncana/javascript/twitterwidget.js
extension/community_design/design/suncana/javascript/community.js
extension/community_design/design/suncana/javascript/roadmap.js
extension/community_design/design/suncana/javascript/ez.js
extension/community_design/design/suncana/javascript/ezshareevents.js
extension/sevenx/design/simple/javascript/main.js

Templates used to render the page:

UsageRequested templateTemplateTemplate loadedEditOverride
1node/view/full.tplfull/forum_topic.tplextension/sevenx/design/simple/override/templates/full/forum_topic.tplEdit templateOverride template
8content/datatype/view/ezimage.tpl<No override>extension/sevenx/design/simple/templates/content/datatype/view/ezimage.tplEdit templateOverride template
8content/datatype/view/ezxmltext.tpl<No override>extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tplEdit templateOverride template
12content/datatype/view/ezxmltags/paragraph.tpl<No override>extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tplEdit templateOverride template
2content/datatype/view/ezxmltags/strong.tpl<No override>design/standard/templates/content/datatype/view/ezxmltags/strong.tplEdit templateOverride template
2content/datatype/view/ezxmltags/line.tpl<No override>design/standard/templates/content/datatype/view/ezxmltags/line.tplEdit templateOverride template
1pagelayout.tpl<No override>extension/sevenx/design/simple/templates/pagelayout.tplEdit templateOverride template
 Number of times templates used: 34
 Number of unique templates used: 7

Time used to render debug report: 0.0002 secs