Apache + PHP-FPM executing random requests with other vhosts permissions - SOLVED

Discussion in 'General' started by milkki, Oct 19, 2016.

  1. milkki

    milkki New Member

    I have a strange problem that's been randomly showing after ISPConfig 3.1 upgrade. Every now and then I get PHP open_basedir warnings that file from a different client and website is not within allowed path(s):

    [Wed Oct 19 07:56:03 2016] [error] [client x.x.x.x] FastCGI: server "/var/www/clients/client3/web47/cgi-bin/php5-fcgi-*-443-beta.z-trading.fi" stderr: PHP message: PHP Warning: file_exists(): open_basedir restriction in effect. File(/var/www/clients/client18/web119/web/wp-includes/Requests/Hooks.php) is not within the allowed path(s): (/var/www/clients/client3/web47/web:/var/www/clients/client3/web47/tmp:/var/www/beta.z-trading.fi/web:/srv/www/beta.z-trading.fi/web:/usr/share/php5:/tmp:/usr/share/phpmyadmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/usr/share/php) in /var/www/clients/client3/web47/web/wp-includes/class-requests.php on line 145

    [Wed Oct 19 11:53:09 2016] [error] [client x.x.x.x] FastCGI: server "/var/www/clients/client3/web72/cgi-bin/php5-fcgi-*-80-entranze.net" stderr: PHP message: PHP Warning: file_exists(): open_basedir restriction in effect. File(/var/www/clients/client19/web116/web/wp-content/plugins/so-widgets-bundle/widgets/slider/slider.php) is not within the allowed path(s): (/var/www/clients/client3/web72/web:/var/www/clients/client3/web72/tmp:/var/www/entranze.net/web:/srv/www/entranze.net/web:/usr/share/php5:/tmp:/usr/share/phpmyadmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/usr/share/php) in /var/www/clients/client3/web72/web/wp-content/plugins/so-widgets-bundle/so-widgets-bundle.php on line 249

    These errors don't show every time (sometimes loading the website succeeds, sometimes not), and client/website is not always the same. I've seen these mostly with Wordpress sites, but something similar is happening with other PHP-sites (although not caught in logs).

    It seems that Apache or PHP is executing some requests with other vhosts permissions.

    Any idea what might be causing this? Or how to debug it?

    Debian Wheezy
    ISPConfig 3.1
    Apache 2.2.22 prefork
    PHP-FPM (ondemand)
    Xcache, memcached
    Suexec
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Most likely a problem with xcache. Try to disable it.
     
  3. milkki

    milkki New Member

    That fixed it, thank you!
    Is there some other opcode cache that should work with this setup?
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    You can try to use apc instead.
     

Share This Page