ImageMagick Question...

[evanb3184]

Disclaimer: I'm not an Linux expert, nor am I a web developer. We're currently running a LAMP stack on CentOS (Concrete5 as the CMS, Plesk for admin panel).

How can I be absolutely sure Imagemagick is not in use on my site? I've done the following:

Checked that the CentOS packages (Imagemagick, PHP extension, Perl extention) are not installed.

sudo yum list *Image*
sudo yum list *imagic*
All ImageMagick packages are "Available", not "Installed".

File system searched for anything that looked related:

sudo find / -name "*ImageMagick*"
sudo find / -name "*imagick.so*"
sudo find / -name "*imagemagick*"
sudo find / -name "*ImageMagick*"
sudo find / -name "*imagick.so*"
sudo find / -name "convert" (without the wildcards)
sudo find / -name "policy.xml"

No results on those.


PHPInfo for the actual website does not like imagick module loaded.

Anything else you'd recommend? I'm pretty sure we're in the clear, but I don't want to take any chances. Thanks in advance.

 

[IgorG]

Checked that the CentOS packages (Imagemagick, PHP extension, Perl extention) are not installed.

sudo yum list *Image*
sudo yum list *imagic*
All ImageMagick packages are "Available", not "Installed".

It would be better to use the following command for this check:

# rpm -qa | grep -i image

 

[Linulex]

The most simple way to get ImageMagick is to install the php from plesk, that has ImageMagick in it.

It will install ImageMagick itself, the php module, the correct configuration, etc... etc...

Extra plus point is that every php version in every centos version is end of life AND fast-cgi is better for security then php-module.
I do recommend using fast-cgi,, not cgi.

regards
Jan