Hello,
Just upgraded and rewritten all apache configs to the latest available from officials, and ran into a nasty issue:
PHP-FPM shows PHP source code when accessing http://ip/~username/script.php in both cases with AliasMatch and UserDir in /etc/httpd/conf/extra/httpd-vhosts.conf.
I had to completely disable it for security reasons:
I believe it somehow relates to apache bugs mentioned here: http://forum.directadmin.com/showthread.php?t=45797&p=235844#post235844 right? Or could we get a solution in the nearest future?
Just upgraded and rewritten all apache configs to the latest available from officials, and ran into a nasty issue:
PHP-FPM shows PHP source code when accessing http://ip/~username/script.php in both cases with AliasMatch and UserDir in /etc/httpd/conf/extra/httpd-vhosts.conf.
I had to completely disable it for security reasons:
Code:
...
ServerAdmin webmaster@localhost
#UserDir public_html
#AliasMatch ^/~([^/]+)(/.*)* /home/$1/public_html$2
DocumentRoot /var/www/html
ServerName localhost
ScriptAlias /cgi-bin/ /var/www/cgi-bin/
CustomLog /var/log/httpd/homedir.log homedir
...
I believe it somehow relates to apache bugs mentioned here: http://forum.directadmin.com/showthread.php?t=45797&p=235844#post235844 right? Or could we get a solution in the nearest future?