Confixx open_basedir problem.

[tyfius]

Hi,

I stumbled upon a weird problem involving many custom management systems and blog software.

blog/
  /themes/
  /plugins/
  index.php

Take a file in blog/plugins/pname/ and in that file is an include_once('file2.php'); where file2.php is located in the same directory (pname).
Result: open_basedir restriction in effect. It's impossible to ask the customers to change every include statement because this has worked before a server upgrade.

Current setup: PHP 5.0.3 (cli), apache2 suse setup by server4you.de

example from confixx_vhosts.conf:

<VirtualHost myip>
ServerName domain.tld
ServerAlias  www.domain.tld account.server4you.de
DocumentRoot /srv/www/web15/html
SuexecUserGroup web15 ftponly
ScriptAlias /cgi-bin/ /srv/www/web15/html/cgi-bin/
php_admin_value open_basedir /srv/www/web15/:/srv/www/htdocs/phpMyAdmin/:/srv/www/htdocs/confixx/html/gesperrt/
php_admin_value upload_tmp_dir /srv/www/web15/phptmp/
</VirtualHost>

Is there any simple solution to adjust this problem without asking all the customers to change hudreds of pages of code ?

 

[server4downs]

Hey there,

sorry for replying that late. I do not know if this is a PHP bug (haven't checked the bug list), but maybe you try updating PHP5 to 5.1.6 and check if it works then. Loads of open_basedir related bugs have been fixed the last months. 5.0.3 is definitely a little outdated
An update is highly recommended, since you are running a hosting thing on your server (due to security issues)!