ASL + CentOS 5 + Plesk 8.3 = No Emails :)

[PTJames]

When we upgraded our servers and migrated from a non-ASL server, we've found that the php permissions are keeping Horde and Sendmail from working properly.

After spending two months fighting php script issues (exploits), I'm very wary about altering the php.ini and having to fight that battle again.

Here is our current disable list - I'm assuming this was put in when we installed ASL (didnt check it before)

disable_functions = , dl , exec , furl_open , passthru , pfsockopen , popen , posix_kill , posix_mkfifo , posix_setuid , proc_close , proc_open , proc_terminate , shell_exec , system , leak , posix_kill , posix_setpgid , posix_setsid , proc_get_status , proc_nice , show_source , phpinfo

And now we can't use Horde or Sendmail - I know I should remove open and exec from this list to make them work, but I want some "expert" input on this before i do this.

Thank you for your help

[scott]

If you use webmail, then yes you can do that. Eventually we'll get some vhost level exceptions in there. You can certainly do that now if you'd like to do it that way. I believe the syntax is something like "php_value functionname on"

[PTJames]

Scott,

Just to be sure (I'm just the owner, not the sysadmin...) which of the open commands should I remove from the line below (I understand to remove exec...)

[scott]

I believe it uses both.

[aus-city]

Easily fixed. In php in ASL run in safe mode and block everything except you allow:

ALLOW_phpinfo="yes"
ALLOW_popen="yes"

Then horde you can send email.

You don't need exec on at all..

[BerArt]

I did a fresh install of a brand new PE 860 with CentOS 4.4 Server, Plesk 8.3 and ALS but Horde/IMP Webmail is NOT working here either. I tried to remove popen form php.ini (and even exec) but still Horde won't work.

OLD php.ini:
disable_functions = passthru, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, pfsockopen, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, popen, furl_open, exec, dl, shell_exec, system

NEW php.in: (without popen and exec)
disable_functions = passthru, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, pfsockopen, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, furl_open, dl, shell_exec, system

I restarted Apache...

There is nor error just a browser error, see: http://webmail.yle.nl

If I put a # before the php.ini rule so I disable all
#disable_functions = passthru, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, pfsockopen, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, furl_open, dl, shell_exec, system

I receive the next error if I try to open http://webmail.yle.nl
A fatal error has occurred
DB Error: extension not found
Details have been logged for the administrator.

Does smoeone nows why Horde won't work? Everything else (as far as I can see now) is working fine!

ps: for security reasons I removed the "#" in php.ini till I have a sollution for this problem.

Thx in advance,

[BerArt]

Problem solved, I used the PHP4 php.ini