Share » Forums » Setup & design » Suhosin & eZPublish

Suhosin & eZPublish

Suhosin & eZPublish

Tuesday 22 December 2009 7:07:12 am - 7 replies

Author Message

Jérôme Vieilledent

Tuesday 22 December 2009 8:10:23 am

Hi Philippe

Do the log say something (eZ Publish, Apache, PHP) ? Try to regenerate autoloads

Steven E. Bailey

Tuesday 22 December 2009 11:33:12 am

I'm running the php5-suhosin package on a debian dev machine as a module (and compiled in on other machines) and it works - I've found sometimes suhosin will fatal a process that would otherwise only throw a warning. I see this especially with cli things throwing canary efree errors... but depending on your setup - if you don't display php errors you might end up getting blank pages because of errors that you otherwise would ignore.

Certified eZPublish developer
http://ez.no/certification/verify/396111

Available for ezpublish troubleshooting, hosting and custom extension development: http://www.leidentech.com

Philippe VINCENT-ROYOL

Wednesday 23 December 2009 1:29:03 am

Hi Jérôme,

I try this morning again.. clear all cache, restart apache, clear all logs.. i've classical log via eZPublish and juste discover this log on error.log via apache2:

[Wed Dec 23 10:23:26 2009] [notice] Apache/2.2.9 (Debian) PHP/5.2.11-0.dotdeb.1 with Suhosin-Patch mod_ssl/2.2.9 OpenSSL/0.9.8g configured -- resuming normal operations
[Wed Dec 23 10:23:30 2009] [error] [client 10.0.1.172] ALERT - Include filename ('compress.zlib://var/cache/template/compiled/accueil-11849b87506e2c680bfb48fd184d07a8.php') is an URL that is not allowed (attacker '10.0.1.172', file '/var/www/ezpublish/lib/eztemplate/classes/eztemplatecompiler.php', line 447)
[Wed Dec 23 10:23:30 2009] [error] [client 10.0.1.172] ALERT - Include filename ('compress.zlib://var/cache/template/compiled/debug_toolbar-10f724bfab50caab95b70d940c6854fd.php') is an URL that is not allowed (attacker '10.0.1.172', file '/var/www/ezpublish/lib/eztemplate/classes/eztemplatecompiler.php', line 447)

10.0.1.172 is my local ip. Have u ever seen this message?

HI Steven,

I display all errors and warning via apache2 and cli. Maybe a problem with dotdeb package... dont know.. I ll search more :)

Thanks

Certified Developer (4.1): http://auth.ez.no/certification/verify/272607
Certified Developer (4.4): http://auth.ez.no/certification/verify/377321

G+ : http://plus.tl/dspe
Twitter : http://twitter.com/dspe

Jérôme Vieilledent

Wednesday 23 December 2009 5:17:32 am

Hi Philippe

Quick silly question : is zlib extension available on your PHP configuration ?

Jérôme Vieilledent

Wednesday 23 December 2009 5:19:28 am

Also, it seems that you activated template compression, did you ? In that cas, try to turn it off (and you'll also have better performance)

Philippe VINCENT-ROYOL

Wednesday 23 December 2009 6:03:38 am

oh damn.. template compression was on true and zlib was on off..

thanks for ur help :)

Certified Developer (4.1): http://auth.ez.no/certification/verify/272607
Certified Developer (4.4): http://auth.ez.no/certification/verify/377321

G+ : http://plus.tl/dspe
Twitter : http://twitter.com/dspe

Jérôme Vieilledent

Wednesday 23 December 2009 7:02:01 am

You're welcome :)

You must be logged in to post messages in this topic!

36 542 Users on board!

Forums menu