Enable/disable safe_mode in mode Fast-CGI for websites

Hi everybody,

Safemode is not used in ISPConfig 3 as it is marked as deprecated by the PHP developers and will be removed from new php versions, but someone want enable it in old php versions, please follow intructions:

* Notice: Only used for php mode Fast-CGI.

1. Run mysql text on dbispconfig database:

Code:

ALTER TABLE `web_domain` ADD `safemode` ENUM( 'Off', 'On' ) NOT NULL DEFAULT 'On' AFTER `suexec` ;
UPDATE web_domain set safemode='Off';

2. Add below code after row 170 in file /usr/local/ispconfig/interface/web/sites/form/web_domain.tform.php:

PHP:

'safemode' => array (
'datatype' => 'VARCHAR',
'formtype' => 'CHECKBOX',
'default' => 'On',
'value' => array(0 => 'Off',1 => 'On')
),

3. Add below html after row 73 in file /usr/local/ispconfig/interface/web/sites/templates/web_domain_edit.htm:

HTML:

<div class="ctrlHolder">
<p class="label">Safe Mode</p>
<div class="multiField">
{tmpl_var name='safemode'}
</div>
</div>

4. Add text below after row 15 in file /usr/local/ispconfig/server/conf/php-fcgi-starter.master:

Code:

-d safe_mode=<tmpl_var name='safemode'> \

5. Add code below after row 720 in file /usr/local/ispconfig/server/plugins-available/apache2_plugin.inc.php:

PHP:

$fcgi_tpl->setVar('safemode',escapeshellcmd($data["new"]["safemode"]));


Sample picture

Finish, test again, good luck.

 

I agree with you.

Because I'm using old PHP version (5.2.14) (I upgraded to PHP 5.3.3 but unsuccessful) and want more security, so I prefer to safe_mode on.

With a similar way, I've added disable_functions (in php mode Fast-CGI) in sites to more security on share hosting, I think add it into default new version ?

Thanks.

 

I use CentOS 5.5. Would you like tell me more detail about that in ISPConfig 3.0.3 ? It have in ISPConfig 3.2.2 ? Where I can set it ?

I tested in Apache directives on Sites tab, but unsuccessful. I search on internet and found a method (http://www.howtoforge.com/forums/showpost.php?p=219582&postcount=4). If ispconfig updates, I try to modify the fcgi starter script and master template again ? It will set default in new version ?

 

Thank you very much. Hope soon release version.

 

On the current versions can safemode be enabled/disabled via the apache directives on a per site basis?