few questions

[chrisf]

Does suhosin work with php-fpm event?  Is there a yum install for suhosin?

Is there any known problems using suhosin?

I am securing a server for shared hosting and using KloxoMR as the control panel.

Mustafa - have you given consideration to adding php_admin_value to php-fpm template - getting values from client php settings.  This would essentially give them control over their php-fpm instance.  It would be no more difficult than adding the lines to .htaccess - just add them to the php-fpm template.  In a shared hosting environment this is important.

Thanks

[zenkul]

yum install php54-suhosin
too much depreciated in php54

[chrisf]

I have been researching suhosin and php5.4 for two days no stop.

It appears that development is very slow.  But, it also appears suhosin was updated to work stable with php5.4

There is no other way to allow functions like eval() for clients but restrict the functions allowed within.  suhosin does it easily.

Suhosin actually has a lot of "set and forget" security options for php.

I am going to give it a trial run and work with it on my test server... see if it is stable for production.

Thanks for your response zenkel!

Mustafa - any response to modifying php-fpm template to add in individual client php settings?

[zenkul]

in my vps nginx-proxy + php-fpm

I set php memory limit in kloxo-mr panel = read

in "custom.php53-fpm-pool.conf.tpl" = not read

sorry, I am a common user  :roll:

[chrisf]

The template uses a slightly different syntax for setting values in php (php_admin_value) and it does work on a per client basis.

Right now if a client needs something special I am forced to make the change in his/her php-fpm config and chattr +i  to make sure it doesn't get overwritten.

This is actually a very easy solution.

Mustafa this could be implemented very quickly.

[MRatWork]

The template uses a slightly different syntax for setting values in php (php_admin_value) and it does work on a per client basis.

Right now if a client needs something special I am forced to make the change in his/her php-fpm config and chattr +i  to make sure it doesn't get overwritten.

This is actually a very easy solution.

Mustafa this could be implemented very quickly.

Use 'custom rule' for php.ini. Copy /home/php-fpm/tpl/php53-fpm-pool.conf.tpl to  /home/php-fpm/tpl/custom.php53-fpm-pool.conf.tpl then modified this custom file.

After that, run 'sh /script/fixweb; sh /script/restart-web'.

[chrisf]

Mustafa, I know that

I am suggesting an EASY way for you to allow client to change php settings for php-fpm.

Suggestion:
You add the config for php in .htaccess in KlocoMR now.  Php-fpm doesn't use these.

Why not add them to php config template?

loop through all the clients settings adding php_admin_value for each one.

This would be very easy.

Please consider.