FUDforum: FUDforum Suggestions » Add a - using safe mode

Home » FUDforum » FUDforum Suggestions » Add a - using safe mode - option to lock/unlock files

Show: Today's Messages :: Polls :: Message Navigator

Add a - using safe mode - option to lock/unlock files [message #37670]

Thu, 14 June 2007 02:08

Astoria

Messages: 227
Registered: April 2004

Karma: 0

Senior Member

I got slammed with "internal server errors" and refusals to execute when I tried to use the lock/unlock admin function to change my forum's file permissions running in safe mode under phpsuexec. The errors varied depending on whether I had tried to lock or unlock the files, but I got them either way.

It would be nice if I could make my forum-related files as secure as possible automagically. As it is I cannot use the function.

A "running in safe mode" flag could be set somewhere in globals and, if set, vary the permission changes accordingly when the lock/unlock files function is executed.

Report message to a moderator

Re: Add a - using safe mode - option to lock/unlock files [message #37678 is a reply to message #37670]

Thu, 14 June 2007 23:40

Ilia

Messages: 13241
Registered: January 2002

Karma: 0

Senior Member
Administrator
Core Developer

So you'd change permissions of files manually and would like the forum to recognize that fact?

FUDforum Core Developer

Report message to a moderator

Re: Add a - using safe mode - option to lock/unlock files [message #37681 is a reply to message #37678]

Fri, 15 June 2007 01:32

Astoria

Messages: 227
Registered: April 2004

Karma: 0

Senior Member

I'd like to see a different set of permissions applied for lock/unlock, that were compatible with safe mode.

- Scripts with 777 permissions won't execute in safe mode; 755 is the maximum permission it will allow to be run. So if an admin uses Unlock on a site that's in safe mode, the forum will immediately go down and start throwing errors.

I had a problem when I locked the files as well -- the forum gets a different kind of permissions error, or it might have just been the admin functions. Sorry I don't remember the details; right now I just have everything set to 755. I am not sure which feature of safe mode causes the "locked" permission error to occur.

Rummaging around trying to figure it out, I ran across a code snippet someone posted to automatically check for safe mode. Doing something like that would probably work better than relying on the admin to configure it:

<?php
// Check for safe mode
if( ini_get('safe_mode') ){
    // Do it the safe mode way
}else{
    // Do it the regular way
}

?>

Report message to a moderator

Re: Add a - using safe mode - option to lock/unlock files [message #37714 is a reply to message #37681]

Sun, 17 June 2007 14:40

Ilia

Messages: 13241
Registered: January 2002

Karma: 0

Senior Member
Administrator
Core Developer

I don't think it has to do anything with PHP's safe mode, PHP does not check the file's permissions before executing it. This is a web server setting or restriction imposed by some web server module some ISPs use. As such I am not sure how it can be reliably detected via PHP.

FUDforum Core Developer

Report message to a moderator

Re: Add a - using phpsuexec - option to lock/unlock files [message #37718 is a reply to message #37714]

Sun, 17 June 2007 16:41

Astoria

Messages: 227
Registered: April 2004

Karma: 0

Senior Member

The reading I did previous to experimenting with safe mode indicated it not as something you would want to use by itself, but as a hack to address security issues that are introduced by using phpsuexec. And indeed, it does look like phpsuexec is where the permissions issue comes from -- see here. Sorry for the misdirection. It would still be nice if it could be indicated or detected somehow, so that "unlock files" wouldn't break the application in that environment.

(PS Hey, did you write this one? Big fan of safe mode, huh? Razz

)

Report message to a moderator

Previous Topic:	Images only for registered users
Next Topic:	From header when sending to mailing list

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Mon Nov 25 00:37:28 GMT 2024

Total time taken to generate the page: 0.02452 seconds