Question: ez3rc2 in Safe-Mode?

Author Message

Marco Zinn

Sunday 02 March 2003 2:48:32 pm

Hi Folks,

to the ezCrew:
Will you support ezPublish 3 in PHP safe mode? That means: Will it be garanteed to run in a PHP safe mode environment?

to all others:
How is your milage with ez3rc2 in safe mode?
Does anyone have success with rc2 and safemode on?

Currently, I get an error about openbase_dir.
php.net says, this setting/restriction is independant from the PHP safe mode. It also says, that there is a know bug in PHP about openbase_dir.

I'm trying to install ezPublish Systems on a new "1&1 Rootserver" (large ISP in germany). I want to use safemode.
With ez2.2.7, it seems to work now (finally, after 4 nights!).

Marco
http://www.hyperroad-design.com

Volker Lenz

Monday 03 March 2003 2:52:26 am

> Hi Folks,
>
> to the ezCrew:
> Will you support ezPublish 3 in PHP safe mode? That means:
> Will it be garanteed to run in a PHP safe mode
> environment?
>
> to all others:
> How is your milage with ez3rc2 in safe mode?
> Does anyone have success with rc2 and safemode on?
>
> Currently, I get an error about openbase_dir.
> php.net says, this setting/restriction is independant from
> the PHP safe mode. It also says, that there is a know bug in
> PHP about openbase_dir.
>
> I'm trying to install ezPublish Systems on a new "1&1
> Rootserver" (large ISP in germany). I want to use
> safemode.
> With ez2.2.7, it seems to work now (finally, after 4
> nights!).

Hi Marco,

good to know that you are trying to do exactly the same as I do. Installing ezp3 on a 1&1 Root Server. However, why do you think you need php safe mode at all? Is register-globals=off & a sensible mod-rewrite for your Apache not sufficient for you? Or do you access shared dirs.

Regards

Volker

Marco Zinn

Monday 03 March 2003 4:10:07 am

> > I'm trying to install ezPublish Systems on a new "1&1
> > Rootserver" (large ISP in germany). I want to use
> > safemode.
> > With ez2.2.7, it seems to work now (finally, after 4
> > nights!).
>
>
> Hi Marco,
>
> good to know that you are trying to do exactly the same as I
> do. Installing ezp3 on a 1&1 Root Server. However, why do
> you think you need php safe mode at all? Is
> register-globals=off & a sensible mod-rewrite for your
> Apache not sufficient for you? Or do you access shared dirs.

Well, we offer Webspace and ezPublish setups to customers on that same server.
If you allow PHP with safe-mode off, you can easily run into troubles.
PHP without safemode is not very safe and can kill the apache server or more.
But you need to allow your customers to FTP (when they create their owe templates for example). Thus, they could change/create PHP files, which can be dangerous.

Marco
http://www.hyperroad-design.com

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.