RootForum Community

Code: Select all

chown -R root:www-data /var/www/
chmod 550 /var/www/default/
chmod 550 /var/www/test.com/
chmod 440 /var/www/test.com/test.php
chmod 0770 /var/www/tmp/

Code: Select all

server.document-root = "/var/www/default/"

Code: Select all

open_basedir = /var/www/test.com/:/var/www/tmp/
upload_tmp_dir = /var/www/tmp/
disable_functions = file_get_contents,symlink,debug_backtrace,fsockopen,pfsockopen,proc_open,proc_nice,proc_terminate,proc_close,proc_get_status,shell_exec,exec,passthru,system,popen,highlight_file,diskfreespace,disk_free_space,disk_total_space,show_source,php_uname,ini_alter,ini_restore,ini_set,getrusage,get_current_user,set_time_limit,getmyuid,getmypid,dl,leak,stream_socket_accept,stream_socket_client,stream_socket_get_name,stream_socket_recvfrom,stream_socket_sendto,stream_socket_server,proc_nice,pcntl_getpriority,pcntl_wait,get_headers,headers_list,memory_get_peak_usage,stream_socket_shutdown,escapeshellcmd,url_fopen

Code: Select all

open_basedir = /var/www/mein_verzeichnis1

Code: Select all

open_basedir = /var/www/mein_verzeichnis2

Code: Select all

#!/bin/sh

## Absoluter Pfad zur spawn-fcgi binary
SPAWNFCGI="/usr/bin/spawn-fcgi"

## Absoluter Pfad zur PHP binary
FCGIPROGRAM="/srv/www/cgi-bin/php5"

## bind to tcp-port on localhost
FCGISOCKET="/var/sockets/domain.tld/domain.socket"

## uncomment the PHPRC line, if you want to have an extra php.ini for this user
## store your custom php.ini in /var/www/fastcgi/iza/php.ini
## with an custom php.ini you can improve your security
## just set the open_basedir to the users webfolder
## Example: (add this line in you custom php.ini)
## open_basedir = /var/www/vhosts/iza/html
##
PHPRC="/etc/php5/domain"

## number of PHP childs to spawn in addition to the default. Minimum of 2.
## Actual childs = PHP_FCGI_CHILDREN + 1
PHP_FCGI_CHILDREN=5

## number of request server by a single php-process until is will be restarted
PHP_FCGI_MAX_REQUESTS=300

## IP adresses where PHP should access server connections from
FCGI_WEB_SERVER_ADDRS="127.0.0.1"

# allowed environment variables sperated by spaces
ALLOWED_ENV="PATH USER"

## if this script is run as root switch to the following user
USERID=<user>
GROUPID=<group>

################## no config below this line

if test x$PHP_FCGI_CHILDREN = x; then
  PHP_FCGI_CHILDREN=5
fi

export PHP_FCGI_MAX_REQUESTS
export FCGI_WEB_SERVER_ADDRS
export PHPRC

ALLOWED_ENV="$ALLOWED_ENV PHP_FCGI_MAX_REQUESTS FCGI_WEB_SERVER_ADDRS PHPRC"

# copy the allowed environment variables
E=

for i in $ALLOWED_ENV; do
  E="$E $i=$(eval echo "$$i")"
done

# clean environment and set up a new one
env - $E $SPAWNFCGI -s $FCGISOCKET -f "$FCGIPROGRAM -c $PHPRC" -u $USERID -g $GROUPID -C $PHP_FCGI_CHILDREN

chmod 770 $FCGISOCKET

Code: Select all

open_basedir = /var/www