Forwarded to devs Service Plans: Conflicts with the server-wide security policy on PHP 8.0 change

[obendev]

Username: obendev

TITLE

Service Plans: Conflicts with the server-wide security policy on PHP 8.0 change

PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE

Plesk Obsidian v18.0.32_build1800201221.13 os_Ubuntu 18.04

PROBLEM DESCRIPTION

When I try to change the PHP Version in a Service Plan from 7.4 to 8.0, I get the following conformation message:

Are you sure you want to apply this setting?
This setting conflicts with the server-wide security policy.

Content of site_isolation_settings.ini:

[hosting]
php = any
php_handler_type = fpm
python = off
perl = off
fastcgi = any
ssi = any
ssl = on
shell = /opt/psa/bin/chrootsh
php_safe_mode = on
coldfusion = off

Setup of potentially insecure web scripting options that override provider's policy is turned off.
PHP handler type was FPM on 7.4 and stays the same (FPM) when switched to 8.0.

STEPS TO REPRODUCE

Change PHP version to 8.0 in a Service Plan.

ACTUAL RESULT

Plesk asks for confirmation to apply insecure setup.

EXPECTED RESULT

Plesk shouldn't ask for confirmation of applying insecure settings in this case, since setting PHP 8.0 instead of 7.4 isn't insecure.

ANY ADDITIONAL INFORMATION



YOUR EXPECTATIONS FROM PLESK SERVICE TEAM

Confirm bug

 

[obendev]

@IgorG can you forward this? Still a problem on our servers after update to 18.0.33.

 

[IgorG]

Thank you. The bug was confirmed and submitted as PPPM-12731

 

[IgorG]

Fixed in Plesk 18.0.34: Change Log for Plesk Obsidian

Plesk now regards PHP 8 as a secure handler. A change of the service plan PHP version from 7.4 to 8.0 no longer causes the “Conflicts with the server-wide security policy” message to be shown. (PPPM-12731)