I updated my ISPCONFIG to the most recent version. I began receiving PHP IDS errors in the system log file. I opened /usr/local/ispconfig/security/securiry_settings.ini and changed many options to NO: Code: ids_anon_enabled=no ids_user_enabled=no nginx_directives_scan_enabled=no But I continue to get errors when making changes to: POST.php_open_basedir POST.nginx_directives Errors: Code: [INTERFACE]: PHP IDS Alert.Total impact: 14<br/> Affected tags: dt, id, lfi, xss, csrf, rfe<br/> <br/> Variable: POST.php_open_basedir | Value: /var/www/clients/client3/web87/web:/var/www/clients/client3/web87/private:/var/www/clients/client3/web87/tmp:/var/www/xxx.com/web:/srv/www/xxx.com/web:/usr/share/php5:/usr/share/php:/tmp:/usr/share/phpmyadmin:/etc/phpmyadmin:/var/lib/phpmyadmin<br/> Impact: 5 | Tags: dt, id, lfi<br/> Description: Detects specific directory and path traversal | Tags: dt, id, lfi | ID 11<br/> <br/> Variable: POST.nginx_directives | Value: fastcgi_read_timeout 30; client_max_body_size 20M; location / { try_files $uri $uri/ /index.php?$args; } <br/> Impact: 9 | Tags: xss, csrf, id, rfe<br/> Description: Detects JavaScript language constructs | Tags: xss, csrf, id, rfe | ID 20<br/> Description: Detects JavaScript location/document property access and window access obfuscation | Tags: xss, csrf | ID 23<br/> <br/> and Code: [INTERFACE]: PHP IDS Alert.Total impact: 5<br/> Affected tags: dt, id, lfi<br/> <br/> Variable: POST.fastcgi_php_version | Value: PHP 7.1:/etc/init.d/php-7.1-fpm:/opt/php-7.1/lib:/opt/php-7.1/etc/php-fpm.d<br/> Impact: 5 | Tags: dt, id, lfi<br/> Description: Detects specific directory and path traversal | Tags: dt, id, lfi | ID 11<br/> <br/>
The IDS messages are no errors as their score is way below the error score. These get logged just for informational purpose and are not related to the issue that you can't make changes. Use the debug mode to find out what's causing the problem: https://www.faqforge.com/linux/debugging-ispconfig-3-server-actions-in-case-of-a-failure/
Yes, sorry about that. I enabled the DEBUG LOGLEVEL and got this: 22.03.2018-09:16 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'. 22.03.2018-09:16 - DEBUG - Found 2 changes, starting update process. 22.03.2018-09:16 - DEBUG - Calling function 'update' from plugin 'apps_vhost_plugin' raised by event 'server_update'. 22.03.2018-09:16 - DEBUG - Calling function 'update' from plugin 'network_settings_plugin' raised by event 'server_update'. 22.03.2018-09:16 - DEBUG - Network configuration disabled in server settings. 22.03.2018-09:16 - DEBUG - Calling function 'update' from plugin 'postfix_server_plugin' raised by event 'server_update'. 22.03.2018-09:16 - DEBUG - Processed datalog_id 21593 22.03.2018-09:16 - DEBUG - Calling function 'update' from plugin 'apps_vhost_plugin' raised by event 'server_update'. 22.03.2018-09:16 - DEBUG - Calling function 'update' from plugin 'network_settings_plugin' raised by event 'server_update'. 22.03.2018-09:16 - DEBUG - Network configuration disabled in server settings. 22.03.2018-09:16 - DEBUG - Calling function 'update' from plugin 'postfix_server_plugin' raised by event 'server_update'. 22.03.2018-09:16 - DEBUG - Processed datalog_id 21594 22.03.2018-09:16 - DEBUG - Calling function 'restartHttpd' from module 'web_module'. 22.03.2018-09:16 - DEBUG - Checking nginx configuration... 22.03.2018-09:16 - DEBUG - nginx configuration ok! 22.03.2018-09:16 - DEBUG - Restarting httpd: systemctl reload nginx.service 22.03.2018-09:16 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock finished.
Weird glitch.. I think I found the problem.. If I WILDCARD the IPADDRESS of a WEBSITE I can't select PHP-FPM and no SOCKET. I must have an IP ADDRESS selected for a site to get PHP-FPM with Additional PHP versions to work with no socket. Everything will work correctly only if I have an IP address selected for a website.