Re: [us...@httpd] unique php include_path in httpd.conf

2010-04-05 Thread Nilesh Govindarajan
On 04/06/10 04:36, ad wrote: I have several virtual hosts on a dedicated server. In a IFmodule mod_php5c container in an httpd.conf include file I have the following to create a unique include path for each virtual host: IfModule mod_php5.c> php_value include_path ".:/home/virtual/site#/path/to/

[us...@httpd] unique php include_path in httpd.conf

2010-04-05 Thread ad
I have several virtual hosts on a dedicated server. In a IFmodule mod_php5c container in an httpd.conf include file I have the following to create a unique include path for each virtual host: IfModule mod_php5.c> php_value include_path ".:/home/virtual/site#/path/to/include" php_admin_flag saf

Re: [us...@httpd] Someone hacked my apache2 server

2010-04-05 Thread Oleg Goryunov
Dan, Thanks for the advice! I will note that. Oleg. 2010/4/5 > > Oleg, > > Some other things to check/do if you don't already know this... > > Be sure that the httpd process runs as a completely unprivileged user with > nothing but read access to ANYTHING. > Be sure that the content of your site

Re: [us...@httpd] Using ssi include directive overwrites QUERY_STRING variable

2010-04-05 Thread Dennis J.
On 04/05/2010 09:35 PM, Dennis J. wrote: On 04/05/2010 08:36 PM, Dan Poirier wrote: What version did you see this with? If not 2.2.15, it might be fixed in 2.2.15 by the subrequest headers fix. Give it a try. I'm seeing this with 2.2.14, yesterdays fedora build of 2.2.15 and the latest Centos

Re: [us...@httpd] Using ssi include directive overwrites QUERY_STRING variable

2010-04-05 Thread Dennis J.
On 04/05/2010 08:36 PM, Dan Poirier wrote: What version did you see this with? If not 2.2.15, it might be fixed in 2.2.15 by the subrequest headers fix. Give it a try. I'm seeing this with 2.2.14, yesterdays fedora build of 2.2.15 and the latest Centos 5 version 2.2.3-31.el5.centos.4 Regar

Re: [us...@httpd] Using ssi include directive overwrites QUERY_STRING variable

2010-04-05 Thread Dan Poirier
What version did you see this with? If not 2.2.15, it might be fixed in 2.2.15 by the subrequest headers fix. Give it a try. Dan - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apac

Re: [us...@httpd] Someone hacked my apache2 server

2010-04-05 Thread Dan_Mitton
Oleg, Some other things to check/do if you don't already know this... Be sure that the httpd process runs as a completely unprivileged user with nothing but read access to ANYTHING. Be sure that the content of your site is not owned by the same user as the httpd user. Read only access should b

Re: [us...@httpd] Reload kills apache

2010-04-05 Thread Jeff Trawick
On Sun, Apr 4, 2010 at 10:05 AM, Alex S Kurilo wrote: > Apache's processes disappear after `apache2ctl graceful` with the following > lines in errorlog: > > [Sun Apr 04 17:38:25 2010] [error] (4)Interrupted system call: waitpid() > failed > # apache2 -v > Server version: Apache/2.2.9 (Debian) > S

[us...@httpd] Using ssi include directive overwrites QUERY_STRING variable

2010-04-05 Thread Dennis J.
Hi, It looks like there is a serious bug in the handling of virtual includes with Apaches SSI filter. Take the following code: If this is called with the query string "(url)?test=1" then the first echo will print "test=1" as expected but the second one will output "abc=1". Apparently the