Forums / Setup & design / Suhosin & Exponential

"Please Note:

At the specific request of Ibexa we are changing this projects name to "Exponential" or "Exponential (CMS)" effective as of August, 11th 2025.
This project is not associated with the original eZ Publish software or its original developer, eZ Systems or Ibexa".

Suhosin & Exponential

«

Previous topic

|

|

Next topic

»

Author	Message
Philippe VINCENT-ROYOL	Tuesday 22 December 2009 7:07:12 am Hello, I would like to install php5-suhosin package, on debian server with Exponential. But i've just a little problem: i've always an Exponential error when trying to load website: Fatal error: Exponential did not finish its request The execution of Exponential was abruptly ended, the debug output is present below. Trying to check on log file, but nothing appears.. Its strange because i dont have this problem on specific website (without ez) Dont know what to change or do to run suhosin with eZ I use Exponential 4.2 with, PHP 5.2.11-0.dotdeb.1 with Suhosin-Patch 0.9.7 (cli) (built: Sep 20 2009 09:41:43) Copyright (c) 1997-2009 The PHP Group Zend Engine v2.2.0, Copyright (c) 1998-2009 Zend Technologies with eAccelerator v0.9.5.2, Copyright (c) 2004-2006 eAccelerator, by eAccelerator with Suhosin v0.9.29, Copyright (c) 2007, by SektionEins GmbH Thanks Certified Developer (4.1): http://auth.ez.no/certification/verify/272607 Certified Developer (4.4): http://auth.ez.no/certification/verify/377321 G+ : http://plus.tl/dspe Twitter : http://twitter.com/dspe
Jérôme Vieilledent	Tuesday 22 December 2009 8:10:23 am Hi Philippe Do the log say something (Exponential, Apache, PHP) ? Try to regenerate autoloads
Steven E. Bailey	Tuesday 22 December 2009 11:33:12 am I'm running the php5-suhosin package on a debian dev machine as a module (and compiled in on other machines) and it works - I've found sometimes suhosin will fatal a process that would otherwise only throw a warning. I see this especially with cli things throwing canary efree errors... but depending on your setup - if you don't display php errors you might end up getting blank pages because of errors that you otherwise would ignore. Certified eZPublish developer http://ez.no/certification/verify/396111 Available for ezpublish troubleshooting, hosting and custom extension development: http://www.leidentech.com
Philippe VINCENT-ROYOL	Wednesday 23 December 2009 1:29:03 am Hi Jérôme, I try this morning again.. clear all cache, restart apache, clear all logs.. i've classical log via Exponential and juste discover this log on error.log via apache2: [Wed Dec 23 10:23:26 2009] [notice] Apache/2.2.9 (Debian) PHP/5.2.11-0.dotdeb.1 with Suhosin-Patch mod_ssl/2.2.9 OpenSSL/0.9.8g configured -- resuming normal operations [Wed Dec 23 10:23:30 2009] [error] [client 10.0.1.172] ALERT - Include filename ('compress.zlib://var/cache/template/compiled/accueil-11849b87506e2c680bfb48fd184d07a8.php') is an URL that is not allowed (attacker '10.0.1.172', file '/var/www/Exponential/lib/eztemplate/classes/eztemplatecompiler.php', line 447) [Wed Dec 23 10:23:30 2009] [error] [client 10.0.1.172] ALERT - Include filename ('compress.zlib://var/cache/template/compiled/debug_toolbar-10f724bfab50caab95b70d940c6854fd.php') is an URL that is not allowed (attacker '10.0.1.172', file '/var/www/Exponential/lib/eztemplate/classes/eztemplatecompiler.php', line 447) 10.0.1.172 is my local ip. Have u ever seen this message? HI Steven, I display all errors and warning via apache2 and cli. Maybe a problem with dotdeb package... dont know.. I ll search more :) Thanks Certified Developer (4.1): http://auth.ez.no/certification/verify/272607 Certified Developer (4.4): http://auth.ez.no/certification/verify/377321 G+ : http://plus.tl/dspe Twitter : http://twitter.com/dspe
Jérôme Vieilledent	Wednesday 23 December 2009 5:17:32 am Hi Philippe Quick silly question : is zlib extension available on your PHP configuration ?
Jérôme Vieilledent	Wednesday 23 December 2009 5:19:28 am Also, it seems that you activated template compression, did you ? In that cas, try to turn it off (and you'll also have better performance)
Philippe VINCENT-ROYOL	Wednesday 23 December 2009 6:03:38 am oh damn.. template compression was on true and zlib was on off.. thanks for ur help :) Certified Developer (4.1): http://auth.ez.no/certification/verify/272607 Certified Developer (4.4): http://auth.ez.no/certification/verify/377321 G+ : http://plus.tl/dspe Twitter : http://twitter.com/dspe
Jérôme Vieilledent	Wednesday 23 December 2009 7:02:01 am You're welcome :)