• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion
  • Inviting everyone to the UX test of a new security feature in the WP Toolkit
    For WordPress site owners, threats posed by hackers are ever-present. Because of this, we are developing a new security feature for the WP Toolkit. If the topic of WordPress website security is relevant to you, we would be grateful if you could share your experience and help us test the usability of this feature. We invite you to join us for a 1-hour online session via Google Meet. Select a convenient meeting time with our friendly UX staff here.

BIG PROBLEM: Plesk 8.3 & Webmail using "php_admin_value include_path ...."

E

ewdx

Guest
Hi all,

We have dedicated servers and have hit a HUGH problem. In short:

We have an application that uses the PHP function ini_set('include_path'... to add 2 more paths to the PHP include_path, however, when running Plesk 8.3 -> PHP 5.2.5 this becomes a real problem, as soon as anybody on any domain uses Webmail, it breaks all of our sites on all domains, because PHP 5.2.5 introduced a security fix to not allow scripts to override explicitly set php_admin_value and php_admin_flag directives in httpd.conf and its included configuration files.

Is there a way I can add

php_admin_value include_path "/var/www/vhosts/domain.com/httpdocs/path:."

Note: the domian.com would need to change for each domain.

into each domain, without it being overwritten each time a domain is altered via the Plesk 8.3 Admin Panel, as whenever a change is made, the httpd.include file is overwritten !

It would be good if this could be added as a Plesk default, as when we create new domains, the values will be added to the include_path

Any Help would be Appreciated.

This is URGENT as all our sites are broken and down !!!

ALTERNATIVELY, if there is a way to have Horde Webmail work without setting the include_path in the Apache config files, then that would work as well.
ie: remove the php_admin_value include_path "....." from Horde Webmail ?????
 
Thanks for the comments.

If you look at the Changelogs to PHP 5.2.5, it was intentionally done this way.

But a few hours ago, I did change the php_admin_value to php_value in
zz010_psa_httpd.conf for the Horde (Webmail) paths on ports 80 and 443 and it works just fine.

Now can access Webmail, and the sites remain working.

So my next question is, what events cause the file zz010_psa_httpd.conf to be overwritten / regenerated by Plesk ?

I will probably write a cron script to modify this file if it changes. When to run ?
 
Back
Top