• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • Support for BIND DNS has been removed from Plesk for Windows due to security and maintenance risks.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS.

Forwarded to devs Service Plans: Conflicts with the server-wide security policy on PHP 8.0 change

obendev

Basic Pleskian
Username: obendev

TITLE

Service Plans: Conflicts with the server-wide security policy on PHP 8.0 change

PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE

Plesk Obsidian v18.0.32_build1800201221.13 os_Ubuntu 18.04

PROBLEM DESCRIPTION

When I try to change the PHP Version in a Service Plan from 7.4 to 8.0, I get the following conformation message:

Are you sure you want to apply this setting?
This setting conflicts with the server-wide security policy.

Content of site_isolation_settings.ini:
Code:
[hosting]
php = any
php_handler_type = fpm
python = off
perl = off
fastcgi = any
ssi = any
ssl = on
shell = /opt/psa/bin/chrootsh
php_safe_mode = on
coldfusion = off

Setup of potentially insecure web scripting options that override provider's policy is turned off.
PHP handler type was FPM on 7.4 and stays the same (FPM) when switched to 8.0.

STEPS TO REPRODUCE

Change PHP version to 8.0 in a Service Plan.

ACTUAL RESULT

Plesk asks for confirmation to apply insecure setup.

EXPECTED RESULT

Plesk shouldn't ask for confirmation of applying insecure settings in this case, since setting PHP 8.0 instead of 7.4 isn't insecure.

ANY ADDITIONAL INFORMATION



YOUR EXPECTATIONS FROM PLESK SERVICE TEAM

Confirm bug
 
Back
Top