Setup a per-user php.ini to allow open_basedir with suPhp

new way:

If you wish to use per-user php.ini files in: /home/username/php.ini then you can use this guide to add the code:

SetEnv PHP_INI_SCAN_DIR /usr/local/directadmin/data/users/|USER|/php/

ensure is there). Note for complete usage of this setting, a how-to has been created here, which should be consulted with first

If you only want to set a custom php.ini for individual users, and not all users, then you can use this guide to insert just the one line of code into the VirtualHost entires for that domain.

Related:

Improved php.ini handling in 5.3.0

old way:

In order to setup a php.ini for each user with suPhp (installed by custombuild), edit: /etc/httpd/conf/extra/httpd-suphp.conf

Find this line:

suPHP_ConfigPath /usr/local/etc/php5/cgi/

and comment it out by changing it to

#suPHP_ConfigPath /usr/local/etc/php5/cgi/

(just add a # in front of it).

Doing this will let suPhp be more flexible in using a different php.ini file. By default, it will still fall back to the /usr/local/etc/php5/cgi/php.ini if nothing else is set, but by not setting it, it allows us to change it (suPhp only accepts the first call of that command).

The next step is to tell apache where to find the php.ini that you want. Go to: Admin Level → Custom httpd configuration → domain.com

Insert the following 1 line into the top textarea:

suPHP_ConfigPath |HOME|/

exactly as written, then hit save. You can do this for as many single domains as you wish.

Note that you can also make this a global change by adding that line to the virtualhost templates using this guide.

Restart apache when you're done.

Don't forget to actually add a php.ini file into /home/username/php.ini and save it with root as the owner if you don't want the user changing it at all. In that php.ini file, you can specify a custom open_basedir path, thus preventing the user from wandering about the system. Automating a new php.ini can be done with the user_create_post.sh script.

 
php/php.in.txt · Last modified: 2010/03/01 17:43 by muscardin
 
Except where otherwise noted, content on this wiki is licensed under the following license:CC Attribution-Noncommercial-Share Alike 3.0 Unported
Please visit Automatic Backlinks to start earning free backlinks Recent changes RSS feed Donate Powered by PHP Valid XHTML 1.0 Valid CSS Driven by DokuWiki