Re: [users@httpd] Problems with compile httpd-2.4.23 and php-7.1.0

2016-12-21 Thread Michael A. Peters
On 12/21/2016 05:57 PM, Rodrigo Cunha wrote: Dears, i'm install apache service from source httpd-2.4.23.tar.gz with php7; from php-7.1.0.tar.gz, but my phpmyadmin not work in the system and display the message: The /mysqli|mysql/

[users@httpd] Problems with compile httpd-2.4.23 and php-7.1.0

2016-12-21 Thread Rodrigo Cunha
Dears, i'm install apache service from source httpd-2.4.23.tar.gz with php7; from php-7.1.0.tar.gz, but my phpmyadmin not work in the system and display the message: The *mysqli|mysql* exte

Re: [users@httpd] HTTPOxy vulnerability not posted to announce list?

2016-12-21 Thread Jacob Champion
On 12/21/2016 11:20 AM, Jim Allison wrote: Going through the history of the announce list, it seems that the advisory for HTTPOxy was not posted there. I can see that it was posted to the users list back in the summer, but we were only subscribed to the announce list. I can see that other vuln

[users@httpd] HTTPOxy vulnerability not posted to announce list?

2016-12-21 Thread Jim Allison
Hi, We recently had a site fail a PCI DSS scan due to the HTTPOxy vulnerability and we only received notice of Apache 2.4.25 yesterday. We are using 2.2 and a patch has not yet been released for that version. Going through the history of the announce list, it seems that the advisory for HTTPOx

Re: [users@httpd] Allowing users to edit web sites safely

2016-12-21 Thread David Mehler
Hello, Thanks. Could you elaborate more on your solution? How are the site urls formed? Is it domain.com or domain.com/~username? Thanks. Dave. On 12/21/16, David Copeland wrote: > Hi Dave, > > I do the same. The user has an account on the server. The vhost serves > the users site from his hom

Re: [users@httpd] Allowing users to edit web sites safely

2016-12-21 Thread David Copeland
Hi Dave, I do the same. The user has an account on the server. The vhost serves the users site from his home public_html directory. I allow only ssh/scp access, no FTP server is set up, so he uses Filezilla to upload . Regards, Dave. On 20/12/16 05:43 PM, David Mehler wrote: > Hello, > > I've go