Sub Menu
Links Menu
Online Users

In total there are 351 users online :: 3 registered, 0 hidden and 348 guests

Most users ever online was 1091 on Wed Aug 16, 2023 5:27 pm

Registered users: Bing [Bot], Google [Bot], Majestic-12 [Bot] based on users active over the past 60 minutes

Chmod and PHPsuexec

This is where youll find security related information.
Discuss Integramod/phpbb security issues here.

Moderator: Integra Moderator

Chmod and PHPsuexec

PostAuthor: Bush » Wed Sep 13, 2006 1:15 pm

So there are many files in the installation process of Intergramod 4.0 that require the setting of chmod 777 onto the file..

Here is the problem. My host wants to install PHPsuexec which will prevent the running of any chmod 777 files.

What are my or my hosts alternatives?

"To reduce the risk of hackers accessing all sites on the server from a compromised PHP web script, we will be recompiling Apache to support PHPsuexecon Saturday 16th 2006 at 12:00am EST."

^ from my host!
Last edited by Bush on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
no signature.

Bush
Integra Member
Integra Member
 
Posts: 191
Likes: 0 post
Liked in: 0 post
Joined: Tue Mar 28, 2006 7:55 am
Cash on hand: 0.00

Re: Chmod and PHPsuexec

PostAuthor: computerz » Wed Sep 13, 2006 3:16 pm

"Bush";p="15394" wrote:So there are many files in the installation process of Intergramod 4.0 that require the setting of chmod 777 onto the file..

Here is the problem. My host wants to install PHPsuexec which will prevent the running of any chmod 777 files.

What are my or my hosts alternatives?

"To reduce the risk of hackers accessing all sites on the server from a compromised PHP web script, we will be recompiling Apache to support PHPsuexecon Saturday 16th 2006 at 12:00am EST."

^ from my host!


Seems like this is a widespread problem. I don't think phpsuexec will prevent you from using 777 directories, but your best alternative would be to get a dedicated server host so that you can configure your server however you wish.

Also install mod security so that your server won't be compromised.
Last edited by computerz on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

computerz
Members
Members
 
Posts: 84
Likes: 0 post
Liked in: 0 post
Joined: Sun Aug 27, 2006 1:21 pm
Cash on hand: 0.00

PostAuthor: Bush » Wed Sep 13, 2006 5:54 pm

Its a VPS with root access, I have full control..

I already have mod_security installed with some STRICT filters!
Last edited by Bush on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
no signature.

Bush
Integra Member
Integra Member
 
Posts: 191
Likes: 0 post
Liked in: 0 post
Joined: Tue Mar 28, 2006 7:55 am
Cash on hand: 0.00

Re: Chmod and PHPsuexec

PostAuthor: a_lunatic » Thu Sep 14, 2006 6:24 am

My host enabled this aswell & i got this in the email & noticed that the daily back up stopped working about the same day

If you have a script that is not executing, please ensure the permission on the file is set to CHMOD 755. Scripts or folders that are chmodded to 777 will no longer work due to security risks involved with 777 settings. Setting 755 is equivalentto 777 in the new environment.
Last edited by a_lunatic on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
User avatar
a_lunatic
Members
Members
 
Posts: 56
Likes: 0 post
Liked in: 0 post
Joined: Sun Apr 09, 2006 8:05 am
Cash on hand: 0.00

PostAuthor: Bush » Thu Sep 14, 2006 1:29 pm

Hello? Moderators? Coders?

Please answer my questions!
Last edited by Bush on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
no signature.

Bush
Integra Member
Integra Member
 
Posts: 191
Likes: 0 post
Liked in: 0 post
Joined: Tue Mar 28, 2006 7:55 am
Cash on hand: 0.00

Re: Chmod and PHPsuexec

PostAuthor: Drop-Forged » Thu Sep 14, 2006 7:20 pm

"a_lunatic";p="15442" wrote:My host enabled this aswell & i got this in the email & noticed that the daily back up stopped working about the same day

If you have a script that is not executing, please ensure the permission on the file is set to CHMOD 755. Scripts or folders that are chmodded to 777 will no longer work due to security risks involved with 777 settings. Setting 755 is equivalentto 777 in the new environment.


Have you tried changing all your CHMOD 777 folder to 755, Im no expert, but if it is the equivalent in that environment, then it should work.

Correct or No???
Last edited by Drop-Forged on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
[url=http][img=left]http://www.christiansoldiers.com/Sig/sig.png[/img][/url]
[url=http]Free IntegraMod 141 Themes at webhutch.net[/url]

Drop-Forged
Integra Member
Integra Member
 
Posts: 167
Likes: 0 post
Liked in: 0 post
Joined: Sat Apr 08, 2006 7:07 pm
Cash on hand: 0.00

PostAuthor: Bush » Thu Sep 14, 2006 7:40 pm

We'll see if my Daily Backup fails. I set chmod 755 backup/
Last edited by Bush on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
no signature.

Bush
Integra Member
Integra Member
 
Posts: 191
Likes: 0 post
Liked in: 0 post
Joined: Tue Mar 28, 2006 7:55 am
Cash on hand: 0.00

PostAuthor: Michaelo » Thu Sep 21, 2006 4:39 am

Change 777 to 755 as indicated above....
[url=http]This might be helpful...[/url]


Check with your service provider as to what change you need to make to your forum regarding directories and files access/chmod...

Mike
Last edited by Michaelo on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
Kiss Portal Engine phpbbireland (status: Released)
User avatar
Michaelo
Administrator
Administrator
 
Posts: 1646
Likes: 0 post
Liked in: 0 post
Joined: Sat Mar 11, 2006 5:14 pm
Cash on hand: 0.00
Location: Dublin, Ireland

Re: Chmod and PHPsuexec

PostAuthor: a_lunatic » Thu Sep 21, 2006 8:53 pm

I got mine working now by chmod the backup directory to 777 <img> as the host had change all to 755
Last edited by a_lunatic on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
User avatar
a_lunatic
Members
Members
 
Posts: 56
Likes: 0 post
Liked in: 0 post
Joined: Sun Apr 09, 2006 8:05 am
Cash on hand: 0.00


Return to Forum Security

Who is online

Registered users: Bing [Bot], Google [Bot], Majestic-12 [Bot]

cron