Koozali.org: home of the SME Server

PHP-Nuke on 4.1

Dan Brown

Re: Try this
« Reply #15 on: February 19, 2001, 11:42:55 PM »
Following up to myself...

    I forgot one important step.  After creating the nuke user, you'll need to do one more thing:

# mysqladmin reload

    This will cause MySQL to reload the user tables.  If you don't do this, you won't be able to use the nuke user to access the database.

Tim Litwiller

Re: PHP-Nuke on 4.1
« Reply #16 on: February 20, 2001, 04:34:22 AM »
It looks to me like the whole problem comes from not using localhost as the host machine name in the config.php file for php-nuke.  

Use what ever user you want just be aware that root user has much more access than php-nuke needs so that could create a security issue.

I usually create a user for each of the sites that I host.

keith

Re: PHP-Nuke on 4.1
« Reply #17 on: February 20, 2001, 03:36:32 PM »
Thanks everybody for the above newbie guide to PHP-Nuke.
I now have a working version of this and phpMyAdmin.

Keith

Brandon Friedman

Security Issues
« Reply #18 on: February 20, 2001, 04:04:03 PM »
Hi all
Interesting topic you brought up here. I have for some time been testing a few php/MySQL Apps on my e-smith server... a few things I would like to point out (especially regarding security!)

1) This is more of a question: with regards to installing you tarball into a html directory, are you creating i-bays and then dumping it into there or are you using the primary html directory?

2)'chmod all *.php files to 666, all directorys to 777' is this command safe to run on my directories.... i-bay or primary html...?

3)I have been running both TWIG & phpGroupware - I setup both to run from and i-bay (as described on Tim's web site http://linux.made-to-order.net/article.php ) and from the primary html directory .... I have discussed this setup with the experts (e-smith) and have been warned about security .. they suggest writing an alias url script (or something like that!!) , the same way webmail and the e-smith manager have been setup...?

Well jus thought I would give my 2 cents worth...
Regards
BF

keith

Re: Security Issues
« Reply #19 on: February 20, 2001, 05:43:18 PM »
Brandon Friedman wrote:
>
> Hi all
> Interesting topic you brought up here. I have for some time
> been testing a few php/MySQL Apps on my e-smith server... a
> few things I would like to point out (especially regarding
> security!)
>
> 1) This is more of a question: with regards to installing you
> tarball into a html directory, are you creating i-bays and
> then dumping it into there or are you using the primary html
> directory?

ibays

> 3)I have been running both TWIG & phpGroupware - I setup both
> to run from and i-bay (as described on Tim's web site
> http://linux.made-to-order.net/article.php ) and from
> the primary html directory .... I have discussed this setup
> with the experts (e-smith) and have been warned about
> security

> .. they suggest writing an alias url script (or
> something like that!!) , the same way webmail and the e-smith
> manager have been setup...?

Sounds like a good idea.  How do we do this? is it easy(ish) ;}

Regards

keith

Gordon Rowell

Re: Security Issues
« Reply #20 on: February 21, 2001, 12:10:20 AM »
Brandon Friedman wrote:
> [...]
> 2)'chmod all *.php files to 666, all directorys to 777' is
> this command safe to run on my directories.... i-bay or
> primary html...?
> [...]

I can pretty much guarantee that doing so is unsafe.

On the whole, directories should be 755 (write by owner only) and files should
be 644 (write by owner only). Or even more restrictive, depending on your
application. But 666/777 is almost certainly asking for trouble.

Gordon

Hsing-Foo

Re: Try this
« Reply #21 on: August 15, 2001, 10:55:10 AM »
Hi,

Trying to install php-nuke (post-nuke) i'm encountering the following problem:

Fatal error: Call to undefined function: mysql_connect() in /home/e-smith/files/ibays/intranet/html/mainfile.php on line 66

The root user has a new password to use MySQL so I use -p option with mysql.

With all the suggestions and instructions i'm kind a lost here about what is the 'correct' way to install php-nuke.... I'm afraid I messed up my MySQL installation.

Any ideas?

ps. Can anybody point out the location of the php-sqladmin I keep reading about, so I can examine my MySQL databases. Thanks.

Thanks

Dan Brown

Re: Try this
« Reply #22 on: August 15, 2001, 03:51:26 PM »
That error indicates that MySQL support for PHP isn't installed.  You shouldn't get it on a standard e-smith installation.

guestFF

Re: Try this
« Reply #23 on: August 15, 2001, 08:32:02 PM »
Hmmm, it really is a standard installation of 4.1.2, however I did follow your how-to to upgrade php. (look at your logs and you'll see my visits).

You test.php works fine though..?

Any idea

Thanks

RequestedDeletion

Dan Brown

Re: Try this
« Reply #24 on: August 15, 2001, 09:44:59 PM »
If the test.php works, see if mysql support is indicated there.

guestFF

Re: Try this
« Reply #25 on: August 17, 2001, 09:08:44 AM »
Dan,

How can I tell (What do I look for in the test.php result)

The only time mysql is mentioned is in the block configure command:

--snipp--
shmop=shared' '--with-unixODBC=shared' '--with-mysql=shared,/usr' '--with-ldap=shared' '--with-pgsql=shared' '--with-gettext=shared'
---snapp--

RequestedDeletion

guestHH

Re: Try this
« Reply #26 on: August 17, 2001, 08:24:10 PM »
Dan,

The mysql rpm from your how-to install well, but it seems I do not have mysql support.

Any idea why?

ps. Is there a way to go back to the original state, I was sure it would go well, I installed it on my production machine....

I would like to give it a try on another machine.

Thanks,

guestHH

Dan Brown

Re: Try this
« Reply #27 on: August 17, 2001, 08:40:33 PM »
check /etc/php.ini for a line that says extension=mysql.so

guestFF

Re: Try this
« Reply #28 on: August 18, 2001, 03:22:10 AM »
Dan,

It's there (not commented out with ; )

RequestedDeletion

guestFF

Re: Try this
« Reply #29 on: August 18, 2001, 03:24:59 AM »
btw to all readers,

I realise this is off topic, but I don't know any place else to go with e-smith issues, since it is specific e-smith related.

RequestedDeletion

ps. Yes, I should get more in to MySql and PHP :)