Suhosin & eZPublish - community.ez.no

Tuesday 22 December 2009 7:07:12 am - 7 replies

7 replies

Author	Message
Jérôme Vieilledent	Tuesday 22 December 2009 8:10:23 am Hi Philippe Do the log say something (eZ Publish, Apache, PHP) ? Try to regenerate autoloads
Steven E. Bailey	Tuesday 22 December 2009 11:33:12 am I'm running the php5-suhosin package on a debian dev machine as a module (and compiled in on other machines) and it works - I've found sometimes suhosin will fatal a process that would otherwise only throw a warning. I see this especially with cli things throwing canary efree errors... but depending on your setup - if you don't display php errors you might end up getting blank pages because of errors that you otherwise would ignore. Certified eZPublish developer http://ez.no/certification/verify/396111 Available for ezpublish troubleshooting, hosting and custom extension development: http://www.leidentech.com
Philippe VINCENT-ROYOL	Wednesday 23 December 2009 1:29:03 am Hi Jérôme, I try this morning again.. clear all cache, restart apache, clear all logs.. i've classical log via eZPublish and juste discover this log on error.log via apache2: [Wed Dec 23 10:23:26 2009] [notice] Apache/2.2.9 (Debian) PHP/5.2.11-0.dotdeb.1 with Suhosin-Patch mod_ssl/2.2.9 OpenSSL/0.9.8g configured -- resuming normal operations [Wed Dec 23 10:23:30 2009] [error] [client 10.0.1.172] ALERT - Include filename ('compress.zlib://var/cache/template/compiled/accueil-11849b87506e2c680bfb48fd184d07a8.php') is an URL that is not allowed (attacker '10.0.1.172', file '/var/www/ezpublish/lib/eztemplate/classes/eztemplatecompiler.php', line 447) [Wed Dec 23 10:23:30 2009] [error] [client 10.0.1.172] ALERT - Include filename ('compress.zlib://var/cache/template/compiled/debug_toolbar-10f724bfab50caab95b70d940c6854fd.php') is an URL that is not allowed (attacker '10.0.1.172', file '/var/www/ezpublish/lib/eztemplate/classes/eztemplatecompiler.php', line 447) 10.0.1.172 is my local ip. Have u ever seen this message? HI Steven, I display all errors and warning via apache2 and cli. Maybe a problem with dotdeb package... dont know.. I ll search more :) Thanks Certified Developer (4.1): http://auth.ez.no/certification/verify/272607 Certified Developer (4.4): http://auth.ez.no/certification/verify/377321 G+ : http://plus.tl/dspe Twitter : http://twitter.com/dspe
Jérôme Vieilledent	Wednesday 23 December 2009 5:17:32 am Hi Philippe Quick silly question : is zlib extension available on your PHP configuration ?
Jérôme Vieilledent	Wednesday 23 December 2009 5:19:28 am Also, it seems that you activated template compression, did you ? In that cas, try to turn it off (and you'll also have better performance)
Philippe VINCENT-ROYOL	Wednesday 23 December 2009 6:03:38 am oh damn.. template compression was on true and zlib was on off.. thanks for ur help :) Certified Developer (4.1): http://auth.ez.no/certification/verify/272607 Certified Developer (4.4): http://auth.ez.no/certification/verify/377321 G+ : http://plus.tl/dspe Twitter : http://twitter.com/dspe
Jérôme Vieilledent	Wednesday 23 December 2009 7:02:01 am You're welcome :)

You must be logged in to post messages in this topic!