• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Question open_base_dir and Plesk Default Domain permissions

Christian H

New Pleskian
Hello,

I'm trying to get the PHP open_base_dir directive to work in my Plesk environment but It seems like I'm getting blocked by Plesks default permission.

I have this Setup:

Domain A with User "ftpa"
Domain B with User "ftpb"

Both are set up as Domains via the Plesk control panel.
Both have their respective httpdocs folder to host the website.

Path to both domains is /var/www/vhosts/domain/httpdocs

Now, what I want to do now is give Domain A open_base_dir permission to Domain Bs files with PHPs fopen.
The PHP Version is 7.2.15

I have set up the open_base_dir correctly (/var/www/vhosts/domainb/httpdocs/). Despite that, Domain A still can't get access to Domain B.

I've found a solution to my problem:

Plesks default permissions (I am using Plesk 17.8.11) for new Domains is rwxr-x--- (0750).
When I change /var/www/vhosts/domainb to rwxr-x--x (0751), then everything works.

But, I got the feeling that this is not the most optimal way to do it? Securitywise?

Is there another solution I didn't think of?
I tried adding the FTP users to their respective groups - even tried adding them to the psaserv group. But nothing worked.
 
You cannot access the domain files of one subscription from the domains of another subscription. If you want to access files of domain A from domain B, you need to place both in the same subscription.
 
Back
Top