suhosin_php_uploadscan & roundcube

[Marwen]

Hi.

If i compile

DA 1.45.2
Apache 2.4.9
Php 5.3 FPM
Roundcube 1.0.0

with suhosin_php_uploadscan=yes

No one can in roundcube attach an file.

Is there any other settings in the php.ini for allow this ?

Thanks Mario

ps: what suhosin settings in the php.ini for webhosting are the best for using ?

 

[smtalk]

Thank you for the report! I've found a bug and reported to suhosin developers and fixed in CB 2.0. For some reason chmod 711 was not enough for the scanning script and it needed chmod 755. Please do the following, that should solve the problem:

chmod 755 /usr/local/php53/bin/php_uploadscan.sh

 

[SeLLeRoNe]

Is it now fixed on CB? Does i need to reinstall pureftpd for add this feature?

Thanks

 

[smtalk]

Yes, it is now fixed. And it does not affect pureftpd at all. That is used for PHP upload scans.

 

[SeLLeRoNe]

Sorry, confused with the pureftp one xD well, same question but pureftp related?

 

[smtalk]

I don't think pureftpd scanning with ClamAV had any known problems in CB 2.0.

 

[SeLLeRoNe]

Sorry, i suppose i confused you I meant, once i do enable pureftp upload scan in options.conf, does i need to recompile pureftp or what?

Regards

 

[smtalk]

Yes, just reinstall pure-ftpd.