WHMCS - Further Security Steps

[HostXNow]

Hi,

Does LiteSpeed not support this? http://docs.whmcs.com/Further_Security_Steps

Using

$templates_compiledir = "/home/username/templates_c/";
$attachments_dir = "/home/username/attachments/";
$downloads_dir = "/home/username/downloads/";

does not work

but using

$templates_compiledir = "/home/username/public_html/templates_c/";
$attachments_dir = "/home/username/public_html/attachments/";
$downloads_dir = "/home/username/public_html/downloads/";

does work.

 

[webizen]

check error log (i.e. /usr/local/apache/logs/error_log) to see any details of the issue.

 

[HostXNow]

error_log doesn't show any errors for it.

 

[mistwang]

It should work fine, you need to create those directories and set proper permissions.

 

[HostXNow]

I'm using suPHP and so 0755 is being used but I get

Permissions Error
The templates compiling directory '/home/hostxfre/whmcs/templates_c/' must be writeable (CHMOD 777) before you can continue.
If the path shown is incorrect, you can update it in the configuration.php file.

 

[HostXNow]

Another user had an issue too

File(/home/username/es/app/bootstrap.php.cache) is not within the allowed path(s): (/home/username/public_html:/usr/lib/php:/usr/php4/lib/php:/usr/local/lib/php:/usr/local/php4/lib/php:/tmp) in /home/username/public_html/app.php on line 7

 

[HostXNow]

Strange... I just installed LiteSpeed on a VPS with the same software that is being used on the dedicated server and everything seems to be working fine. I guess there is issue with dedicated server.

 

[mistwang]

Maybe you need to check open_basedir setting, LiteSpeed PHP enforce open_basedir while suphp does not.

 

[HostXNow]

Is there setting in LiteSpeed for that? I couldn't find it.

Here is another site where I found the index page is no longer loading correctly http://www.jrhosting.org

Something to do with includes? I have AddOutputFilter INCLUDES .shtml .htm .html in /usr/local/apache/conf/include/pre_main_global.conf

Is not LiteSpeed not seeing that?

All other sites are loading fine.

 

[mistwang]

open_basedir is set for each vhost in httpd.conf by cpanel with php_admin_value. it usually only allow /home/user/public_html directory.

AddOutputFilter should work with LiteSpeed. could be something else.
However, it is not recommended to set SSI for htm and html file at global level, it slowdown serving plain html pages. better doing it to specific account need that.

 

[xpressdev]

Hi,

Does LiteSpeed not support this? http://docs.whmcs.com/Further_Security_Steps

Using

$templates_compiledir = "/home/username/templates_c/";
$attachments_dir = "/home/username/attachments/";
$downloads_dir = "/home/username/downloads/";

does not work

but using

$templates_compiledir = "/home/username/public_html/templates_c/";
$attachments_dir = "/home/username/public_html/attachments/";
$downloads_dir = "/home/username/public_html/downloads/";

does work.

In your configuration.php file, ensure that all the added lines are before the closing PHP tag ('?>') so that it falls with the rest of the lines between '<?php' and '?>'.