I can't make changes to website configurations after updating my panel

Discussion in 'Installation/Configuration' started by fbarcenas, Mar 22, 2018.

  1. fbarcenas

    fbarcenas Member

    I updated my ISPCONFIG to the most recent version.
    I began receiving PHP IDS errors in the system log file.
    I opened /usr/local/ispconfig/security/securiry_settings.ini and changed many options to NO:
    Code:
    ids_anon_enabled=no
    ids_user_enabled=no 
    nginx_directives_scan_enabled=no  
    But I continue to get errors when making changes to:
    POST.php_open_basedir
    POST.nginx_directives

    Errors:
    Code:
    [INTERFACE]: PHP IDS Alert.Total impact: 14<br/> Affected tags: dt, id, lfi, xss, csrf, rfe<br/> <br/> Variable: POST.php_open_basedir | Value: /var/www/clients/client3/web87/web:/var/www/clients/client3/web87/private:/var/www/clients/client3/web87/tmp:/var/www/xxx.com/web:/srv/www/xxx.com/web:/usr/share/php5:/usr/share/php:/tmp:/usr/share/phpmyadmin:/etc/phpmyadmin:/var/lib/phpmyadmin<br/> Impact: 5 | Tags: dt, id, lfi<br/> Description: Detects specific directory and path traversal | Tags: dt, id, lfi | ID 11<br/> <br/> Variable: POST.nginx_directives | Value: fastcgi_read_timeout 30; client_max_body_size 20M; location / { try_files $uri $uri/ /index.php?$args; } <br/> Impact: 9 | Tags: xss, csrf, id, rfe<br/> Description: Detects JavaScript language constructs | Tags: xss, csrf, id, rfe | ID 20<br/> Description: Detects JavaScript location/document property access and window access obfuscation | Tags: xss, csrf | ID 23<br/> <br/>
    and
    Code:
    [INTERFACE]: PHP IDS Alert.Total impact: 5<br/> Affected tags: dt, id, lfi<br/> <br/> Variable: POST.fastcgi_php_version | Value: PHP 7.1:/etc/init.d/php-7.1-fpm:/opt/php-7.1/lib:/opt/php-7.1/etc/php-fpm.d<br/> Impact: 5 | Tags: dt, id, lfi<br/> Description: Detects specific directory and path traversal | Tags: dt, id, lfi | ID 11<br/> <br/>
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

  3. fbarcenas

    fbarcenas Member

  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Then you probably did not enable the debug log mode yet. Beside that, the changes are still pending?
     
  5. fbarcenas

    fbarcenas Member

    Yes, sorry about that. I enabled the DEBUG LOGLEVEL and got this:

    22.03.2018-09:16 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'.
    22.03.2018-09:16 - DEBUG - Found 2 changes, starting update process.
    22.03.2018-09:16 - DEBUG - Calling function 'update' from plugin 'apps_vhost_plugin' raised by event 'server_update'.
    22.03.2018-09:16 - DEBUG - Calling function 'update' from plugin 'network_settings_plugin' raised by event 'server_update'.
    22.03.2018-09:16 - DEBUG - Network configuration disabled in server settings.
    22.03.2018-09:16 - DEBUG - Calling function 'update' from plugin 'postfix_server_plugin' raised by event 'server_update'.
    22.03.2018-09:16 - DEBUG - Processed datalog_id 21593
    22.03.2018-09:16 - DEBUG - Calling function 'update' from plugin 'apps_vhost_plugin' raised by event 'server_update'.
    22.03.2018-09:16 - DEBUG - Calling function 'update' from plugin 'network_settings_plugin' raised by event 'server_update'.
    22.03.2018-09:16 - DEBUG - Network configuration disabled in server settings.
    22.03.2018-09:16 - DEBUG - Calling function 'update' from plugin 'postfix_server_plugin' raised by event 'server_update'.
    22.03.2018-09:16 - DEBUG - Processed datalog_id 21594
    22.03.2018-09:16 - DEBUG - Calling function 'restartHttpd' from module 'web_module'.
    22.03.2018-09:16 - DEBUG - Checking nginx configuration...
    22.03.2018-09:16 - DEBUG - nginx configuration ok!
    22.03.2018-09:16 - DEBUG - Restarting httpd: systemctl reload nginx.service
    22.03.2018-09:16 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
    finished.
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    It is working fine according to the debug output, what exactly is not working?
     
  7. fbarcenas

    fbarcenas Member

    Weird glitch.. I think I found the problem.. If I WILDCARD the IPADDRESS of a WEBSITE I can't select PHP-FPM and no SOCKET. I must have an IP ADDRESS selected for a site to get PHP-FPM with Additional PHP versions to work with no socket. Everything will work correctly only if I have an IP address selected for a website.
     

Share This Page