open_basedir

NodeWorx Feature Requests
1

When creating a new interworx user I’d like to have by default the
“php_admin_value open_basedir “/home/account/”” set in the httpd config file.

It could be great to have an option to enable or disable this feature.

Pascal

2 
[root@worxnoo etc]# cat /home/interworx/etc/vhost-base.conf
<VirtualHost <<IP_ADDR>>:<<PORT>>>

  <<SUEXEC>>

  DocumentRoot <<WEBROOT>>
  ServerName <<DOMAIN>>

  ServerAlias <<ALIASES>>
  ServerAdmin webmaster@<<DOMAIN>>

  # subdomain logic
  RewriteEngine On
  RewriteOptions inherit
  RewriteCond %{HTTP_HOST} !^www\.<<ESCDOMAIN>> [NC]
  RewriteCond %{HTTP_HOST} !^<<ESCDOMAIN>> [NC]
  RewriteCond %{HTTP_HOST} ^([A-Z0-9a-z-]+)\.<<ESCDOMAIN>> [NC]
  RewriteCond %{DOCUMENT_ROOT}/%1 -d
  RewriteRule ^(.+) %{HTTP_HOST}/$1 [C]
  RewriteRule ^([0-9A-Za-z-]+)\.<<ESCDOMAIN>>/?(.*)$ %{DOCUMENT_ROOT}/$1/$2 [L]
  # end subdomain logic

  ErrorLog <<ERRORLOG>>
  CustomLog <<XFERLOG>> combined

  php_admin_flag engine On

  # cgi: <<CGISTATUS>>
  <Directory <<WEBROOT>>>
  <<CGI1>>
  </Directory>

  <<CGI2>>

</VirtualHost>
3

so cool :slight_smile:

I never seen this template file before.

So something like this should work


php_admin_flag engine On
php_admin_value open_basedir "<<WEBROOT>>/"

Thanks a ton CMI :slight_smile:

Pascal

4

Hello,

I added this line in /home/interworx/etc/vhost-base.conf

php_admin_value open_basedir “<<WEBROOT>>/:/usr/share/pear/”

It works fine, every per vhost php scripts can only read the vhost webroot files and /usr/share/pear files.

But does it exist a variable for only /home/account/ ?

Pascal

5

That one I have no idea about :slight_smile: If that value will accept …/ in the path though you could

 php_admin_value open_basedir "<<WEBROOT>>/../../:/usr/share/pear/"
6

I don’t think “…/” is allowed.

Based on that, the open_basedir value seems to be nothing more than a loose pattern match against an absolute file path. Adding “…/” should cause every file to fail. (Also note that adding a trailing slash makes the pattern match more restrictive, singling out a specific directory.)

So, does anyone know the “home folder” counterpart to <<WEBROOT>>? I seem to have the same need as pascal, but this is the only thread I could find. :frowning:

Additionally, I have read that InterWorx-CP v2.0 was supposed to add support for Safe Mode and open_basedir, but my v2.0.5 (with the default theme) does not appear to offer those settings in NodeWorx. Are those features still on the way?

7

jimp,

There is no homedir variable exposed (yet) but I’ll open a bug report so we can get it made available.

Regarding safe_mode on/off etc we’ll have it in a future release, it is near the top of our list :).

Chris

8

[quote=IWorx-Chris;4400]jimp,

There is no homedir variable exposed (yet) but I’ll open a bug report so we can get it made available.

Regarding safe_mode on/off etc we’ll have it in a future release, it is near the top of our list :).[/quote]
Are either of these available yet? I still would like to have the homedir variable if possible. Is a list of variables published in the documentation somewhere?

9

Hi Jimp,

You should be able to use the combination of <<PACKROOT>> (for package root) and <<DOMAIN>>, like this:

<<PACKROOT>>/<<DOMAIN>>

That will get you

/home/username/domain.com

for example.

Paul

10

That looks like what I need. Thanks! :slight_smile: