Permissions Problem in virtual host (php site)

Dev Shed Forums Sponsor:

November 2nd, 2012, 10:17 PM

nlhaines

Registered User

Join Date: Nov 2012

Posts: 3

Time spent in forums: 34 m 56 sec
Reputation Power: 0

Permissions Problem in virtual host (php site)

I'm not sure what exactly went wrong, but at some point I broke my roundcube installation. Now, when I try to access roundcube I get

Code:

PHP Fatal error:  require_once(): Failed opening required 'program/include/iniset.php' (include_path='.:/usr/share/pear:/usr/share/php') in /srv/www/roundcube/index.php on line 31

The file /srv/www/roundcube/program/include/iniset.php exists. Changing permissions from the unix prompt does not seem to help. I also tried modifying index.php with the following

I've tried modifying the line a number of ways

require_once 'program/include/iniset.php';
require_once(__DIR__ . "/program/include/iniset.php");
require_once("/srv/www/roundcube/program/include/iniset.php");
require_once './program/include/iniset.php';
require_once '/program/include/iniset.php';

With any of these versions I get an error.

When I call phpinfo() from within index.php I get"open_basedir => no value => no value" when called from the command line....

This site is configured to run within an apache virtualhost with the following settings:

Code:

<VirtualHost *:443>
        ServerAdmin EDITED
        ServerName webmail.mydomain.c-m
        DocumentRoot /srv/www/roundcube/
        ErrorLog /srv/www/mydomain.c-m/logs/webmail-error.log
        CustomLog /srv/www/mydomain.com/logs/webmail-access.log common
        SSLEngine on
        SSLCertificateFile /etc/httpd/certificate.pem
        SSLCertificateKeyFile /etc/httpd/privkey.pem
        <Location />
                RewriteBase /
                SSLRequire %{SSL_CIPHER_USEKEYSIZE} >= 128
        </Location>
        <Directory /srv/www/roundcube/>
                Options +FollowSymLinks Indexes
                AllowOverride All
                order allow,deny
                allow from all
        </Directory>
        Options Includes FollowSymLinks
</VirtualHost>

<VirtualHost *:80>
        ServerAdmin EDITED
        ServerName webmail.mydomain.c-m
        Redirect permanent / EDITED
</VirtualHost>

PHP can print which files are in /srv/www/roundcube and /srv/www/roundcube/program/ but not /srv/www/roundcube/program/include/

When I replace roundcube's index.php with an index.html which links to a gif file in /srv/www/roundcube/program/ I get the error Permission denied: access to /program/blocked.gif denied, referer: EDITED

I can successfully, however, link to files in the same directory as index.php.

All files/directories under /srv/www/roundcube are chmodded to 644 and are owned by apache (which I think I just read is bad practice).

November 3rd, 2012, 09:57 AM

E-Oreo

Lost in code

Join Date: Dec 2004

Posts: 7,930

Folding Points: 945 Folding Title: Novice Folder

Time spent in forums: 2 Months 7 h 39 m 37 sec
Reputation Power: 6991

Quote:

All files/directories under /srv/www/roundcube are chmodded to 644 and are owned by apache (which I think I just read is bad practice).

Having the files and directories owned by Apache is correct, however having the directories set to 644 is not. You need the execution bit set on a directory in order to list the files in it, so directories should be set to 755, while files are set to 644.

__________________
PHP FAQ
How to program a basic, secure login system using PHP

Quote:

Originally Posted by Spad

Ah USB, the only rectangular connector where you have to make 3 attempts before you get it the right way around