Re: php5 port seems broken
Tim Kellers wrote: On 1/22/12 5:35 PM, Tim Dunphy wrote: Hello list, I'm attempting to install php5 from my ports tree. I've attempted the latest version ( 5.3.9 located in /usr/ports/lang/php5) and the 'latest stable' (5.2.17 located in /usr/ports/lang/php52). The result is pretty much the same: [snip] = php-5.3.9.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/. = Attempting to fetch http://dk.php.net/distributions/php-5.3.9.tar.bz2 fetch: http://dk.php.net/distributions/php-5.3.9.tar.bz2: Requested Range Not Satisfiable = Attempting to fetch http://de.php.net/distributions/php-5.3.9.tar.bz2 fetch: http://de.php.net/distributions/php-5.3.9.tar.bz2: Requested Range Not Satisfiable = Attempting to fetch http://es.php.net/distributions/php-5.3.9.tar.bz2 fetch: http://es.php.net/distributions/php-5.3.9.tar.bz2: Requested Range Not Satisfiable = Attempting to fetch http://fi.php.net/distributions/php-5.3.9.tar.bz2 fetch: http://fi.php.net/distributions/php-5.3.9.tar.bz2: Requested Range Not Satisfiable = Attempting to fetch http://fr.php.net/distributions/php-5.3.9.tar.bz2 [snip] When I went to portupgrade mine on 16 Jan I experienced exactly the same. I ended up locating the tarball somewhere, downloaded it, and placed it in distfiles manually. Then the portupgrade went without hitch. I was just wondering if anyone might have a guess as to why this wasn't working? My bet is bad links pointing at a bad tarball. [snip] I just portupgraded my php5 this morning and I was able to fetch the distfile without trouble. It might just be a partially dled file and a checksum mismatch. Sounds like the situation was discovered fairly quick and corrected. [snip] -Mike ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: php5 port seems broken
On 1/22/12 5:35 PM, Tim Dunphy wrote: Hello list, I'm attempting to install php5 from my ports tree. I've attempted the latest version ( 5.3.9 located in /usr/ports/lang/php5) and the 'latest stable' (5.2.17 located in /usr/ports/lang/php52). The result is pretty much the same: [root@LBSD2:/usr/ports/lang/php5] #make install === Vulnerability check disabled, database not found === License check disabled, port has not defined LICENSE === Found saved configuration for php5-5.3.9 === Extracting for php5-5.3.9 = SHA256 Checksum mismatch for php-5.3.9.tar.bz2. = SHA256 Checksum OK for suhosin-patch-5.3.9-0.9.10.patch.gz. === Refetch for 1 more times files: php-5.3.9.tar.bz2 === Vulnerability check disabled, database not found === License check disabled, port has not defined LICENSE === Found saved configuration for php5-5.3.9 = php-5.3.9.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/. = Attempting to fetch http://dk.php.net/distributions/php-5.3.9.tar.bz2 fetch: http://dk.php.net/distributions/php-5.3.9.tar.bz2: Requested Range Not Satisfiable = Attempting to fetch http://de.php.net/distributions/php-5.3.9.tar.bz2 fetch: http://de.php.net/distributions/php-5.3.9.tar.bz2: Requested Range Not Satisfiable = Attempting to fetch http://es.php.net/distributions/php-5.3.9.tar.bz2 fetch: http://es.php.net/distributions/php-5.3.9.tar.bz2: Requested Range Not Satisfiable = Attempting to fetch http://fi.php.net/distributions/php-5.3.9.tar.bz2 fetch: http://fi.php.net/distributions/php-5.3.9.tar.bz2: Requested Range Not Satisfiable = Attempting to fetch http://fr.php.net/distributions/php-5.3.9.tar.bz2 === Vulnerability check disabled, database not found === License check disabled, port has not defined LICENSE === Found saved configuration for php5-5.3.9 = SHA256 Checksum mismatch for php-5.3.9.tar.bz2. = SHA256 Checksum OK for suhosin-patch-5.3.9-0.9.10.patch.gz. === Giving up on fetching files: php-5.3.9.tar.bz2 Make sure the Makefile and distinfo file (/usr/ports/lang/php5/distinfo) are up to date. If you are absolutely sure you want to override this check, type make NO_CHECKSUM=yes [other args]. *** Error code 1 Stop in /usr/ports/lang/php5. *** Error code 1 Stop in /usr/ports/lang/php5. *** Error code 1 Stop in /usr/ports/lang/php5. I was just wondering if anyone might have a guess as to why this wasn't working? thanks tim I just portupgraded my php5 this morning and I was able to fetch the distfile without trouble. It might just be a partially dled file and a checksum mismatch. You can try (as root) rm -rf /usr/ports/distfiles/php-5.3.9.tar.bz2 and cd /usr/ports/lang/php5 make clean make install clean If that gets you past the checksum error, you should be able to build it successfully. Tim Kellers ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: php5 port seems broken
On Sun, 22 Jan 2012 18:01:29 -0500 Tim Kellers wrote: On 1/22/12 5:35 PM, Tim Dunphy wrote: Hello list, I'm attempting to install php5 from my ports tree. I've attempted the latest version ( 5.3.9 located in /usr/ports/lang/php5) and the 'latest stable' (5.2.17 located in /usr/ports/lang/php52). The result is pretty much the same: suhosin-patch-5.3.9-0.9.10.patch.gz. === Giving up on fetching files: php-5.3.9.tar.bz2 Make sure the Makefile and distinfo file (/usr/ports/lang/php5/distinfo) are up to date. If you are absolutely sure you want to override this check, type make NO_CHECKSUM=yes [other args]. *** Error code 1 I just portupgraded my php5 this morning and I was able to fetch the distfile without trouble. It might just be a partially dled file and a checksum mismatch. if you do a make checksum it will download the file or resume a partial download before checking the hash. You can try (as root) rm -rf /usr/ports/distfiles/php-5.3.9.tar.bz2 and cd /usr/ports/lang/php5 make clean make install clean or make distclean If that gets you past the checksum error, you should be able to build it successfully. Probably the ports tree needs to be updated to pick-up an updated hash value. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: php5 port seems broken
Hello again, Thanks for your input. Before attempting to install php on this machine I updated my ports tree with csvsup. But following the steps in this article helped me to get past this point. http://icesquare.com/wordpress/freebsdproblem-to-update-php-port/ Which was basically: #sudo rm -Rf /var/db/portsnap/* #sudo portsnap fetch extract #sudo portsnap fetch update #cd /usr/ports/distfiles/ #sudo wget http://fi.php.net/distributions/php-5.3.9.tar.bz2 #cd /usr/ports/lang/php5 #sudo make That was all I had to do. :) However I'm onto a new stumbling block, so if you're still tuned in I hope you don't mind if I bounce this off the list. It seems that Apache 2.2 is not recognizing PHP now that it's installed. If I go to a php test page in a web browser this is all I see: ?php // Show all information, defaults to INFO_ALL phpinfo(); // Show just the module information. // phpinfo(8) yields identical results. phpinfo(INFO_MODULES); ? These are the contents of the file I am hitting: ?php // Show all information, defaults to INFO_ALL phpinfo(); // Show just the module information. // phpinfo(8) yields identical results. phpinfo(INFO_MODULES); ? I checked to see that in my main apache config file (httpd.conf) I have this line: LoadModule php5_modulelibexec/apache22/libphp5.so And of course I've restarted apache after installing the php5 port. :) And since apache isn't even recognizing php at this point hitting the test page does not generate any errors in the error logs. Any thoughts/hits/suggestions from here? thanks tim - Original Message - From: RW rwmailli...@googlemail.com To: freebsd-questions@freebsd.org Sent: Sunday, January 22, 2012 7:07:21 PM Subject: Re: php5 port seems broken On Sun, 22 Jan 2012 18:01:29 -0500 Tim Kellers wrote: On 1/22/12 5:35 PM, Tim Dunphy wrote: Hello list, I'm attempting to install php5 from my ports tree. I've attempted the latest version ( 5.3.9 located in /usr/ports/lang/php5) and the 'latest stable' (5.2.17 located in /usr/ports/lang/php52). The result is pretty much the same: suhosin-patch-5.3.9-0.9.10.patch.gz. === Giving up on fetching files: php-5.3.9.tar.bz2 Make sure the Makefile and distinfo file (/usr/ports/lang/php5/distinfo) are up to date. If you are absolutely sure you want to override this check, type make NO_CHECKSUM=yes [other args]. *** Error code 1 I just portupgraded my php5 this morning and I was able to fetch the distfile without trouble. It might just be a partially dled file and a checksum mismatch. if you do a make checksum it will download the file or resume a partial download before checking the hash. You can try (as root) rm -rf /usr/ports/distfiles/php-5.3.9.tar.bz2 and cd /usr/ports/lang/php5 make clean make install clean or make distclean If that gets you past the checksum error, you should be able to build it successfully. Probably the ports tree needs to be updated to pick-up an updated hash value. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: php5 port seems broken
On 01/23/12 10:50, Tim Dunphy wrote: Hello again, Thanks for your input. Before attempting to install php on this machine I updated my ports tree with csvsup. But following the steps in this article helped me to get past this point. http://icesquare.com/wordpress/freebsdproblem-to-update-php-port/ Which was basically: #sudo rm -Rf /var/db/portsnap/* #sudo portsnap fetch extract #sudo portsnap fetch update #cd /usr/ports/distfiles/ #sudo wget http://fi.php.net/distributions/php-5.3.9.tar.bz2 #cd /usr/ports/lang/php5 #sudo make That was all I had to do. :) However I'm onto a new stumbling block, so if you're still tuned in I hope you don't mind if I bounce this off the list. It seems that Apache 2.2 is not recognizing PHP now that it's installed. If I go to a php test page in a web browser this is all I see: ?php // Show all information, defaults to INFO_ALL phpinfo(); // Show just the module information. // phpinfo(8) yields identical results. phpinfo(INFO_MODULES); ? These are the contents of the file I am hitting: ?php // Show all information, defaults to INFO_ALL phpinfo(); // Show just the module information. // phpinfo(8) yields identical results. phpinfo(INFO_MODULES); ? I checked to see that in my main apache config file (httpd.conf) I have this line: LoadModule php5_modulelibexec/apache22/libphp5.so And of course I've restarted apache after installing the php5 port. :) And since apache isn't even recognizing php at this point hitting the test page does not generate any errors in the error logs. Check your mimetypes definition for application/x-httpd-php and application/x-httpd-php-source (I think. cat ports/lang/php5/pkg-message for details)? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: php5 port seems broken
On 1/22/12 7:50 PM, Tim Dunphy wrote: Hello again, Thanks for your input. Before attempting to install php on this machine I updated my ports tree with csvsup. But following the steps in this article helped me to get past this point. http://icesquare.com/wordpress/freebsdproblem-to-update-php-port/ Which was basically: #sudo rm -Rf /var/db/portsnap/* #sudo portsnap fetch extract #sudo portsnap fetch update #cd /usr/ports/distfiles/ #sudo wget http://fi.php.net/distributions/php-5.3.9.tar.bz2 #cd /usr/ports/lang/php5 #sudo make That was all I had to do. :) However I'm onto a new stumbling block, so if you're still tuned in I hope you don't mind if I bounce this off the list. It seems that Apache 2.2 is not recognizing PHP now that it's installed. If I go to a php test page in a web browser this is all I see: ?php // Show all information, defaults to INFO_ALL phpinfo(); // Show just the module information. // phpinfo(8) yields identical results. phpinfo(INFO_MODULES); ? These are the contents of the file I am hitting: ?php // Show all information, defaults to INFO_ALL phpinfo(); // Show just the module information. // phpinfo(8) yields identical results. phpinfo(INFO_MODULES); ? I checked to see that in my main apache config file (httpd.conf) I have this line: LoadModule php5_modulelibexec/apache22/libphp5.so And of course I've restarted apache after installing the php5 port. :) And since apache isn't even recognizing php at this point hitting the test page does not generate any errors in the error logs. Any thoughts/hits/suggestions from here? thanks tim - Original Message - From: RWrwmailli...@googlemail.com To: freebsd-questions@freebsd.org Sent: Sunday, January 22, 2012 7:07:21 PM Subject: Re: php5 port seems broken On Sun, 22 Jan 2012 18:01:29 -0500 Tim Kellers wrote: On 1/22/12 5:35 PM, Tim Dunphy wrote: Hello list, I'm attempting to install php5 from my ports tree. I've attempted the latest version ( 5.3.9 located in /usr/ports/lang/php5) and the 'latest stable' (5.2.17 located in /usr/ports/lang/php52). The result is pretty much the same: suhosin-patch-5.3.9-0.9.10.patch.gz. ===Giving up on fetching files: php-5.3.9.tar.bz2 Make sure the Makefile and distinfo file (/usr/ports/lang/php5/distinfo) are up to date. If you are absolutely sure you want to override this check, type make NO_CHECKSUM=yes [other args]. *** Error code 1 I just portupgraded my php5 this morning and I was able to fetch the distfile without trouble. It might just be a partially dled file and a checksum mismatch. if you do a make checksum it will download the file or resume a partial download before checking the hash. You can try (as root) rm -rf /usr/ports/distfiles/php-5.3.9.tar.bz2 and cd /usr/ports/lang/php5 make clean make install clean or make distclean If that gets you past the checksum error, you should be able to build it successfully. Probably the ports tree needs to be updated to pick-up an updated hash value. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org Did you out this in httpd.conf? from pkg-message.mod: *** Make sure index.php is part of your DirectoryIndex. You should add the following to your Apache configuration file: AddType application/x-httpd-php .php AddType application/x-httpd-php-source .phps *** Tim Kellers ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Php5 port and Apache Module
Christopher Hilton wrote: Jonathan Horne wrote: [...] Everyone seems to be misunderstanding my question. I'm aware of how to build mod_php5. I'm curious about why the default configuration builds php5 as a standalone CLI and CGI rather than as an apache module. I'm assuming that there is some good engineering behind this decision but I'd like to know a little more about that engineering. Is there some advantage to running php as a Fast CGI process? I guess that mod_php5 depends on Apache and maintainer don't want this big dependency. The second is - if it will depends on Apache of some version (eg. 1.3) it will be broken with another version (2.0 and 2.2). It apply for binary packages. If somebody is compiling ports himself, then can check option with apache or add WITH_APACHE in to /etc/make.conf Miroslav Lachman ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Php5 port and Apache Module
On Sat, 09 Jun 2007 21:45:03 -0400 Christopher Hilton [EMAIL PROTECTED] wrote: Jonathan Horne wrote: Bob wrote: The php4 php5 port apache module used to be default before FBSD 6.0. Around 6.0 may have been the timeline for this change, but it affected users of 5.4 and 5.5 too; one 5.5-STABLE here. I ran into this updating phpMyAdmin last year, which also enforced upgrading from php4 to php5 - unnecessarily, according to the phpMyAdmin specs - and made it no longer possible to install php5 (thus eg phpMyAdmin) from the packages .. Many people before you on this list have wanted the php4/5 apache module turned back on as default but so far the port maintainer has not done anything in any way of justifying removing the apache module from the default setting or re-enable it as the default. [snip] seems like it was removed from the default config of lang/php5 for security reasons. many people who do build php5 do not need the apache module, so no sense building it if its not needed. I may be wrong of course, but my observation is that the majority of people (who mention) installing php do so for use as an apache module. cd /usr/ports/lang/php5 make config (edit your choices) make deinstall make reinstall its just one of those things that you learn to live with after a while. Mmmm. I don't see how it would hurt people who do want to use PHP as a CLI language, or for CGI, if mod_php5 were to be built by default also, making the php package useful again. libphp5.so is under 3MB. Everyone seems to be misunderstanding my question. I'm aware of how to build mod_php5. I'm curious about why the default configuration builds php5 as a standalone CLI and CGI rather than as an apache module. I'm assuming that there is some good engineering behind this decision but I'd like to know a little more about that engineering. Is there some advantage to running php as a Fast CGI process? -- Chris P.S. Sorry Bob, I've scanned the commit logs for the port and there is no mention of security problems with mod_php5.so. To tell the truth I cannot imagine that there would be any security issues in mod_php5.so that didn't also exist in /usr/local/bin/php-cgi. I could be wrong here though and then I would have the answer to my question. Colour me curious too. It appears more like a personal preference than engineering as such. It might also reflect the relative disrepute that installing from packages has fallen into, as those having leading edge hardware tend to forget the convenience and speed of packages compared to especially large compilations on sub-GHz boxes. And of CDROM sets. That said, I'm thankful to developers that it even exists as a port :) Cheers, Ian ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Php5 port and Apache Module
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ian Smith wrote: Around 6.0 may have been the timeline for this change, but it affected users of 5.4 and 5.5 too; one 5.5-STABLE here. I ran into this updating phpMyAdmin last year, which also enforced upgrading from php4 to php5 - unnecessarily, according to the phpMyAdmin specs - and made it no longer possible to install php5 (thus eg phpMyAdmin) from the packages .. That is incorrect. The phpMyAdmin port works perfectly well with php4. The *default* version of php that the port would cause to be installed as a dependency if there was no previously installed php on the system - -- that changed from 4 to 5 a while back, but that was actually a result of system-wide changes in /usr/ports/Mk/bsd.php.mk Note that there is not a lot of point installing phpMyAdmin from packages. The phpMyAdmin port does not compile anything -- all it does it pull down the dist files and copy them into place. Essentially what the package does, except that the port gives you immensely greater flexibility in fitting in with alternate dependencies. Cheers, Matthew - -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate Kent, CT11 9PW -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.3 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGa7Zn8Mjk52CukIwRCK2YAJ0ZaUx7KmDopyaLLtb6HeV0A4HlTQCdHEP8 kUKvXN9SrbwxmRFxspGRqhY= =vw6Q -END PGP SIGNATURE- ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Php5 port and Apache Module
On Sun, 10 Jun 2007, Matthew Seaman wrote: Ian Smith wrote: Around 6.0 may have been the timeline for this change, but it affected users of 5.4 and 5.5 too; one 5.5-STABLE here. I ran into this updating phpMyAdmin last year, which also enforced upgrading from php4 to php5 - unnecessarily, according to the phpMyAdmin specs - and made it no longer possible to install php5 (thus eg phpMyAdmin) from the packages .. That is incorrect. The phpMyAdmin port works perfectly well with php4. The *default* version of php that the port would cause to be installed as a dependency if there was no previously installed php on the system - -- that changed from 4 to 5 a while back, but that was actually a result of system-wide changes in /usr/ports/Mk/bsd.php.mk To be fair, that was on a huge portupgrade from 5.4-R to 5-STABLE last December involving most ports including xorg and kde, and upgrading the installed php4 to php5 (as a consequence of the _then_ dependency tree) was the only thing that proved problematic, and that using using every prefetched package that portupgrade -anPP could find first. At the time, after a couple of days' struggle, I relented and went with php5, and after the aforementioned making config then installing the php5 port, all was plain sailing. As I recall it may have been a dependency of phpMyAdmin, pecl-pdflib, that kept insisting on php5? Anyway, water under the bridge; phpMyAdmin 2.9.1 works fine, and I soon have another big upgrade to do (patiently awaiting xorg 7 packages :) Note that there is not a lot of point installing phpMyAdmin from packages. The phpMyAdmin port does not compile anything -- all it does it pull down the dist files and copy them into place. Essentially what the package does, except that the port gives you immensely greater flexibility in fitting in with alternate dependencies. On a 300MHz laptop with a 'fast' 5400rpm drive, packages are the go wherever possible, but I'll try remembering that. It's a nice port. Thanks Matthew, Cheers, Ian ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Php5 port and Apache Module
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ian Smith wrote: Anyway, water under the bridge; phpMyAdmin 2.9.1 works fine, and I soon have another big upgrade to do (patiently awaiting xorg 7 packages :) I take it you are aware of: http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-1 http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-2 http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-3 http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-4 and have taken steps to secure your phpMyAdmin installation. Wrapping phpMyAdmin inside HTTP Basic Auth is a good idea. Even better if you can also serve it via HTTPS. Upgrading to the latest released version (2.10.1) is certainly recommended. This isn't excessive paranoia -- there are webcrawlers in the wild hunting for phpMyAdmin installations by trying all the common URLs that PMA gets installed as, including what I recommend in the port. Cheers, Matthew - -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate Kent, CT11 9PW -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.3 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGbAQO8Mjk52CukIwRCDTBAJ0Yt6J0uDfwO8AZQJD2avYSTGjg0ACffbqW YahKpz0N617yWWbANwHsepc= =r04R -END PGP SIGNATURE- ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Php5 port and Apache Module
On Sun, 10 Jun 2007, Matthew Seaman wrote: Ian Smith wrote: Anyway, water under the bridge; phpMyAdmin 2.9.1 works fine, and I soon have another big upgrade to do (patiently awaiting xorg 7 packages :) I take it you are aware of: http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-1 http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-2 http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-3 http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-4 I am now, thanks. and have taken steps to secure your phpMyAdmin installation. Wrapping phpMyAdmin inside HTTP Basic Auth is a good idea. Even better if you can also serve it via HTTPS. Upgrading to the latest released version (2.10.1) is certainly recommended. I'm only running it on localhost currently for local database work, not externally accessible, but your warnings are well appreciated. Frankly I don't have much confidence in PHP's security generally, let alone for complex applications like phpMyAdmin using lots of javascript and such, yet find pma the most useful thing for working with Mysql databases. This isn't excessive paranoia -- there are webcrawlers in the wild hunting for phpMyAdmin installations by trying all the common URLs that PMA gets installed as, including what I recommend in the port. Indeed it's not excessive; noticed here on Saturday on several sites on a public server that's NOT running phpMyAdmin (all from this IP, fwiw): 87.106.25.69 - - [09/Jun/2007:18:05:44 +1000] GET /phpmyadmin/main.php HTTP/1.0 404 287 - pmafind 87.106.25.69 - - [09/Jun/2007:18:05:44 +1000] GET /PMA/main.php HTTP/1.0 404 280 - pmafind 87.106.25.69 - - [09/Jun/2007:18:05:45 +1000] GET /mysql/main.php HTTP/1.0 404 282 - pmafind 87.106.25.69 - - [09/Jun/2007:18:05:45 +1000] GET /admin/main.php HTTP/1.0 401 471 - pmafind 87.106.25.69 - - [09/Jun/2007:18:05:46 +1000] GET /db/main.php HTTP/1.0 404 279 - pmafind 87.106.25.69 - - [09/Jun/2007:18:05:46 +1000] GET /dbadmin/main.php HTTP/1.0 404 284 - pmafind 87.106.25.69 - - [09/Jun/2007:18:05:47 +1000] GET /web/phpMyAdmin/main.php HTTP/1.0 404 291 - pmafind 87.106.25.69 - - [09/Jun/2007:18:05:47 +1000] GET /admin/pma/main.php HTTP/1.0 401 471 - pmafind Cheers, Ian ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Php5 port and Apache Module
Miroslav Lachman wrote: I guess that mod_php5 depends on Apache and maintainer don't want this big dependency. The second is - if it will depends on Apache of some version (eg. 1.3) it will be broken with another version (2.0 and 2.2). It apply for binary packages. If somebody is compiling ports himself, then can check option with apache or add WITH_APACHE in to /etc/make.conf That makes sense almost to the point of justifying the existence of a mod_php5 port for those people who want apache+mod_php5. However given the fact that this would double the workload on the maintainer I understand. Thanks -- Chris -- __o All I was doing was trying to get home from work. _`\,_ -Rosa Parks ___(*)/_(*)___ Christopher Sean Hiltonchris | at | vindaloo.com pgp key: D0957A2D/f5 30 0a e1 55 76 9b 1f 47 0b 07 e9 75 0e 14 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: Php5 port and Apache Module
The php4 php5 port apache module used to be default before FBSD 6.0. Many people before you on this list have wanted the php4/5 apache module turned back on as default but so far the port maintainer has not done anything in any way of justifying removing the apache module from the default setting or re-enable it as the default. This has forced all php4/5 users who want to use php in apache to compile it manually with the apache module option selected during the make install of the port. When it was part of the default the php4/5 package was so quick to install and ready to work with apache without any special handling. Hope you have better luck finding the justification for it being removed from the default. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Christopher Hilton Sent: Saturday, June 09, 2007 3:51 PM To: [EMAIL PROTECTED]; User Questions Subject: Php5 port and Apache Module I can see that if I build the php5 port it defaults to CLI and CGI mode but the Apache module is not built. Am I wrong when I assume that the Apache Module will have the best performance? I guess that I'd just like to understand the engineering decisions behind the default in the port's configuration. -- Chris -- __o All I was doing was trying to get home from work. _`\,_ -Rosa Parks ___(*)/_(*)___ Christopher Sean Hiltonchris | at | vindaloo.com pgp key: D0957A2D/f5 30 0a e1 55 76 9b 1f 47 0b 07 e9 75 0e 14 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Php5 port and Apache Module
Bob wrote: The php4 php5 port apache module used to be default before FBSD 6.0. Many people before you on this list have wanted the php4/5 apache module turned back on as default but so far the port maintainer has not done anything in any way of justifying removing the apache module from the default setting or re-enable it as the default. This has forced all php4/5 users who want to use php in apache to compile it manually with the apache module option selected during the make install of the port. When it was part of the default the php4/5 package was so quick to install and ready to work with apache without any special handling. Hope you have better luck finding the justification for it being removed from the default. I've been operating under the assumption that: There is some configuration you can do in /usr/local/etc/apache*/httpd.conf to get apache to use the CGI version of php; That this can be done without requiring a shebang (#! ...) line at the beginning of every php script; And that using php as a CGI script offers better performance than running it as an apache module. Looking on the internet though I cannot seem to find a set of instructions for configuring php-cgi in apache2. And once I do find the configuration I'll have to have a shebang at the start of every php module. Further all the performance comparisons that I've seen seem show that the performance of php as a FastCGI script and as an Apache Module are about equal. I don't want to get into a war. I'm still assuming that the port maintainer knows something that I don't. If I cannot get this running soon I guess that I will go back to mod_php5 and revisit this later. -- Chris -- __o All I was doing was trying to get home from work. _`\,_ -Rosa Parks ___(*)/_(*)___ Christopher Sean Hiltonchris | at | vindaloo.com pgp key: D0957A2D/f5 30 0a e1 55 76 9b 1f 47 0b 07 e9 75 0e 14 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Php5 port and Apache Module
Bob wrote: The php4 php5 port apache module used to be default before FBSD 6.0. Many people before you on this list have wanted the php4/5 apache module turned back on as default but so far the port maintainer has not done anything in any way of justifying removing the apache module from the default setting or re-enable it as the default. This has forced all php4/5 users who want to use php in apache to compile it manually with the apache module option selected during the make install of the port. When it was part of the default the php4/5 package was so quick to install and ready to work with apache without any special handling. Hope you have better luck finding the justification for it being removed from the default. I've been operating under the assumption that: There is some configuration you can do in /usr/local/etc/apache*/httpd.conf to get apache to use the CGI version of php; That this can be done without requiring a shebang (#! ...) line at the beginning of every php script; And that using php as a CGI script offers better performance than running it as an apache module. Looking on the internet though I cannot seem to find a set of instructions for configuring php-cgi in apache2. And once I do find the configuration I'll have to have a shebang at the start of every php module. Further all the performance comparisons that I've seen seem show that the performance of php as a FastCGI script and as an Apache Module are about equal. I don't want to get into a war. I'm still assuming that the port maintainer knows something that I don't. If I cannot get this running soon I guess that I will go back to mod_php5 and revisit this later. -- Chris -- __o All I was doing was trying to get home from work. _`\,_ -Rosa Parks ___(*)/_(*)___ Christopher Sean Hiltonchris | at | vindaloo.com pgp key: D0957A2D/f5 30 0a e1 55 76 9b 1f 47 0b 07 e9 75 0e 14 ___ seems like it was removed from the default config of lang/php5 for security reasons. many people who do build php5 do not need the apache module, so no sense building it if its not needed. cd /usr/ports/lang/php5 make config (edit your choices) make deinstall make reinstall its just one of those things that you learn to live with after a while. cheers, -- Jonathan Horne [EMAIL PROTECTED] http://dfwlpiki.dfwlp.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Php5 port and Apache Module
Jonathan Horne wrote: Bob wrote: The php4 php5 port apache module used to be default before FBSD 6.0. Many people before you on this list have wanted the php4/5 apache module turned back on as default but so far the port maintainer has not done anything in any way of justifying removing the apache module from the default setting or re-enable it as the default. [snip] seems like it was removed from the default config of lang/php5 for security reasons. many people who do build php5 do not need the apache module, so no sense building it if its not needed. cd /usr/ports/lang/php5 make config (edit your choices) make deinstall make reinstall its just one of those things that you learn to live with after a while. Everyone seems to be misunderstanding my question. I'm aware of how to build mod_php5. I'm curious about why the default configuration builds php5 as a standalone CLI and CGI rather than as an apache module. I'm assuming that there is some good engineering behind this decision but I'd like to know a little more about that engineering. Is there some advantage to running php as a Fast CGI process? -- Chris P.S. Sorry Bob, I've scanned the commit logs for the port and there is no mention of security problems with mod_php5.so. To tell the truth I cannot imagine that there would be any security issues in mod_php5.so that didn't also exist in /usr/local/bin/php-cgi. I could be wrong here though and then I would have the answer to my question. -- __o All I was doing was trying to get home from work. _`\,_ -Rosa Parks ___(*)/_(*)___ Christopher Sean Hiltonchris | at | vindaloo.com pgp key: D0957A2D/f5 30 0a e1 55 76 9b 1f 47 0b 07 e9 75 0e 14 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: php5 port
Nian wrote: Hello I tryed to install your php5-5.1.6_2 recently. It works fine but when I run php --version the version is 5.1.2? matilda# php --version PHP 5.1.2 (cli) (built: Mar 16 2006 03:15:52) Copyright (c) 1997-2006 The PHP Group Zend Engine v2.1.0, Copyright (c) 1998-2006 Zend Technologies thats odd, mine looks like this: PHP 5.1.6 with Suhosin-Patch 0.9.5 (cli) (built: Oct 16 2006 16:00:28) Copyright (c) 1997-2006 The PHP Group Zend Engine v2.1.0, Copyright (c) 1998-2006 Zend Technologies with eAccelerator v0.9.5-rc1, Copyright (c) 2004-2006 eAccelerator, by eAccelerator be sure to update your ports tree and try a reinstall. I have never had that happen to be before. The date on your php executable is old as well. are you sure it: a) compiled clean and b) was installed? Eric ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: php5 port
In response to Eric [EMAIL PROTECTED]: Nian wrote: Hello I tryed to install your php5-5.1.6_2 recently. It works fine but when I run php --version the version is 5.1.2? matilda# php --version PHP 5.1.2 (cli) (built: Mar 16 2006 03:15:52) March 16th isn't very recently. Looks like on March 16th, someone installed PHP in a non-standard way and it's picking up the wrong one. -- Bill Moran Collaborative Fusion Inc. IMPORTANT: This message contains confidential information and is intended only for the individual named. If the reader of this message is not an intended recipient (or the individual responsible for the delivery of this message to an intended recipient), please be advised that any re-use, dissemination, distribution or copying of this message is prohibited. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: php5 port broken???
User Gandalf wrote: === Vulnerability check disabled, database not found === Found saved configuration for php5-5.1.4 = php-5.1.4.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/. = Attempting to fetch from http://br.php.net/distributions/. fetch: http://br.php.net/distributions/php-5.1.4.tar.bz2: size mismatch: Search. Its been covered many times in the last few days. Cheers Richard ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: php5 port broken???
The php5 port is broken. The port's distro file contains incorrect size hash's. Delete the ports distro file and do make config to get options screen. Only option that should be on is the create apache module option. Then do make install clean Since this problem was reported to the ports group last week the port config files may have been fix already. Try rm -rf /usr/ports/lang/php5 to delete the old ports config files and then do cvsup to get most current php5 port config files. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: php5 port error
Has anyone installed PHP5 on 6.1 yet? I've tried fetching a file off a mirror and copying it to /usr/ports/distfiles but I still get php-5.1.4.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/ Ashley -- If you do it the stupid way, you will have to do it again - Gregory Chudnovsky ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: php5 port error
Yes I just went through this this morning. The md5 size count is not correct in the php5 port. See /usr/ports/lang/php5/distro I renamed the distro to distro.org and did make install clean and it found source to download. Warning. You have to download a new copy of the php5 port config files to get version that changes back to defaulting to including the apache module. Do make config before make install so you can verify the compile time options are set to include the apache module. Please submit bug PR on this. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Ashley Moran Sent: Tuesday, May 16, 2006 10:01 AM To: freebsd-questions@freebsd.org Subject: Re: php5 port error Has anyone installed PHP5 on 6.1 yet? I've tried fetching a file off a mirror and copying it to /usr/ports/distfiles but I still get php-5.1.4.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/ Ashley -- If you do it the stupid way, you will have to do it again - Gregory Chudnovsky ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: php5 port error
On Tuesday 16 May 2006 16:00, Ashley Moran wrote: Has anyone installed PHP5 on 6.1 yet? I've tried fetching a file off a mirror and copying it to /usr/ports/distfiles but I still get php-5.1.4.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/ I had a similar error. I downloaded the php-5.1.4.tar.bz2 file manually, determined its size, MD5 and SHA256 hashes, and put all that info into /usr/ports/lang/php5/distinfo. My portupgrade -R php5 then went OK. My current /usr/ports/lang/php5/distinfo: MD5 (php-5.1.4.tar.bz2) = 66a806161d4a2d3b5153ebe4cd0f2e1c SHA256 (php-5.1.4.tar.bz2) = b55253e9557eceb901d83217ec192da22c28c7b2fdf714d3f151f1db663b5a32 SIZE (php-5.1.4.tar.bz2) = 6356171 -- The ability of the OSS process to collect and harness the collective IQ of thousands of individuals across the Internet is simply amazing. - Vinod Vallopillil http://www.opensource.org/halloween/halloween4.php ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: php5 port error
Luyt wrote: On Tuesday 16 May 2006 16:00, Ashley Moran wrote: Has anyone installed PHP5 on 6.1 yet? I've tried fetching a file off a mirror and copying it to /usr/ports/distfiles but I still get php-5.1.4.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/ I had a similar error. I downloaded the php-5.1.4.tar.bz2 file manually, determined its size, MD5 and SHA256 hashes, and put all that info into /usr/ports/lang/php5/distinfo. My portupgrade -R php5 then went OK. My current /usr/ports/lang/php5/distinfo: MD5 (php-5.1.4.tar.bz2) = 66a806161d4a2d3b5153ebe4cd0f2e1c SHA256 (php-5.1.4.tar.bz2) = b55253e9557eceb901d83217ec192da22c28c7b2fdf714d3f151f1db663b5a32 SIZE (php-5.1.4.tar.bz2) = 6356171 thanks a lot Luyt, you saved my day, i was stuck trying to install php since yesterday, great work --- Miguel ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: php5 port error
Miguel [EMAIL PROTECTED] writes: Luyt wrote: On Tuesday 16 May 2006 16:00, Ashley Moran wrote: Has anyone installed PHP5 on 6.1 yet? I've tried fetching a file off a mirror and copying it to /usr/ports/distfiles but I still get php-5.1.4.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/ I had a similar error. I downloaded the php-5.1.4.tar.bz2 file manually, determined its size, MD5 and SHA256 hashes, and put all that info into /usr/ports/lang/php5/distinfo. My portupgrade -R php5 then went OK. My current /usr/ports/lang/php5/distinfo: MD5 (php-5.1.4.tar.bz2) = 66a806161d4a2d3b5153ebe4cd0f2e1c SHA256 (php-5.1.4.tar.bz2) = b55253e9557eceb901d83217ec192da22c28c7b2fdf714d3f151f1db663b5a32 SIZE (php-5.1.4.tar.bz2) = 6356171 thanks a lot Luyt, you saved my day, i was stuck trying to install php since yesterday, You can always use make makesum to regenerate the checksums, but be *very* careful about this; you are throwing away your only guarantee (such as it is) that you are installing what you think you are. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: php5 port error
Lowell Gilbert wrote: Miguel [EMAIL PROTECTED] writes: Luyt wrote: On Tuesday 16 May 2006 16:00, Ashley Moran wrote: Has anyone installed PHP5 on 6.1 yet? I've tried fetching a file off a mirror and copying it to /usr/ports/distfiles but I still get php-5.1.4.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/ I had a similar error. I downloaded the php-5.1.4.tar.bz2 file manually, determined its size, MD5 and SHA256 hashes, and put all that info into /usr/ports/lang/php5/distinfo. My portupgrade -R php5 then went OK. My current /usr/ports/lang/php5/distinfo: MD5 (php-5.1.4.tar.bz2) = 66a806161d4a2d3b5153ebe4cd0f2e1c SHA256 (php-5.1.4.tar.bz2) = b55253e9557eceb901d83217ec192da22c28c7b2fdf714d3f151f1db663b5a32 SIZE (php-5.1.4.tar.bz2) = 6356171 thanks a lot Luyt, you saved my day, i was stuck trying to install php since yesterday, You can always use make makesum to regenerate the checksums, but be *very* careful about this; you are throwing away your only guarantee (such as it is) that you are installing what you think you are. Hi, i am trying to install mod_php5 but it doesnt work either, this is the error: proxy# portinstall mod_php5 [Updating the pkgdb format:dbm_hash in /var/db/pkg ... - 26 packages found (-1 +0) (...) done] cd: can't cd to /usr/ports/www/mod_php5 ** Port directory not found: www/mod_php5 ** Listing the failed packages (*:skipped / !:failed) ! www/mod_php5 (port directory error) --- Packages processed: 0 done, 0 ignored, 0 skipped and 1 failed proxy# it does seems like there is something seriously broken between the index file in the ports and the real directory locations, is there a way to begin from scratch? --- Miguel ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: php5 port error
Hi, i am trying to install mod_php5 but it doesnt work either, this is the error: proxy# portinstall mod_php5 [Updating the pkgdb format:dbm_hash in /var/db/pkg ... - 26 packages found (-1 +0) (...) done] cd: can't cd to /usr/ports/www/mod_php5 ** Port directory not found: www/mod_php5 ** Listing the failed packages (*:skipped / !:failed) ! www/mod_php5 (port directory error) --- Packages processed: 0 done, 0 ignored, 0 skipped and 1 failed proxy# it does seems like there is something seriously broken between the index file in the ports and the real directory locations, is there a way to begin from scratch? mod_php5 directory was removed. check /usr/ports/MOVED -- Linux is for people who hate Micro$oft. BSD is for people who love Unix ... ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: php5 port error
fbsd wrote: After a complete port-all download on fresh 6.1 system the distro size and md5 specified in the php5 make config files does not match any of the download sites the port looks at. Is this a error in the php5 port??? ___ I had that exact same problem this morning when I did a fresh install of PHP5. However, after trying what seemed like a dozen or so sites, it finally found one that it liked. I have the log file of the build if it is of any use to anyone. -- Gerard Seibert [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]