PDA

View Full Version : php_value error_log "/big/dom/xsitename/phperror.log"


phppete
09-05-2007, 08:45 AM
Does anyone at FQ know why I can't override the default php error log location? On CPanel servers I always put my php error log in the home/ directory. I would like to have php_value set the php error log but it seems you have done something to prevent that working.

When setting up a new site on one of your servers I prefer

This

php_value error_log "/big/dom/xsitename/phperror.log"

doesn't work :wah:

I know the file is in logs_cgi but I prefer choosing my own location.

Arthur
09-05-2007, 09:09 AM
Does anyone at FQ know why I can't override the default php error log location? Yes, you can't override the value because it has been set with php_admin_value.

-Arthur

Tom E.
09-05-2007, 09:29 AM
Can you create a symlink from your preferred location to the actual location?

phppete
09-05-2007, 10:28 AM
Yes, you can't override the value because it has been set with php_admin_value.

-Arthur

OK, thanks for letting me know.

Terra
09-05-2007, 02:22 PM
Does anyone at FQ know why I can't override the default php error log location?
Couple reasons...

1) Administrative routines needs a static location where nightly maintenance scripts will test its size and remove it if it has grown too large (> 20MB)...

2) Security... Apache starts up in root mode and if I allow anyone to change the log file location, then they can clobber any file on the server or plant a file anywhere they want... e.g. php_value error_log "/etc/passwd" or php_value error_log "/big/dom/xnotyouraccount/www/let_me_in_to_their_account.php" or even more nefarious if there were sanity checks, "/big/dom/xyour_account/../xnotyouraccount/www/let_me_in_to_their_account.php" and even worse ""/big/dom/xyour_account/symlink_to_other_account/www/let_me_in_to_their_account.php"...

phppete
09-05-2007, 02:28 PM
Does anyone at FQ know why I can't override the default php error log location?
Couple reasons...

1) Administrative routines needs a static location where nightly maintenance scripts will test its size and remove it if it has grown too large (> 20MB)...

2) Security... Apache starts up in root mode and if I allow anyone to change the log file location, then they can clobber any file on the server or plant a file anywhere they want... e.g. php_value error_log "/etc/passwd" or php_value error_log "/big/dom/xnotyouraccount/www/let_me_in_to_their_account.php" or even more nefarious if there were sanity checks, "/big/dom/xyour_account/../xnotyouraccount/www/let_me_in_to_their_account.php" and even worse ""/big/dom/xyour_account/symlink_to_other_account/www/let_me_in_to_their_account.php"...

OK no problem, I understand :) I've noticed CPanel has many of the above features, such as being able to view all accounts on the server, the ability to include files from other accounts and all kinds of weird and unusual features which keeps me here :)