PHP disabled while provisioning new modules

Sinus Pi

• May 17, 2019 12:21

Hello. As I was upgrading my EA4-managed PHP7 installation to add a few modules, I kept reloading a particular PHP page and at one point it returned all my PHP source code, as if - for that moment - PHP support in Apache failed and the server chose to simply display my source directly. This is obviously a security concern, as database passwords or other critical data may get exposed that way. I'm thus not very willing to try to reproduce the issue again, as I don't have completely separate, non-production cPanel installations at the moment. Can you verify if there is, at any point during the provisioning, a brief time where PHP could be disabled but Apache still running?

• 

  cPanelMichael

  • May 20, 2019 19:17

  Hello @Sinus Pi, Can you open a

  0
• 

  Sinus Pi

  • May 20, 2019 22:35

  I can do that when I get it approved by people upstairs - for now I merely wanted to know if it's a known issue, or maybe an obvious "hell, right, we didn't expect that to happen, it could cause trouble indeed" forehead-slapper.

  0
• 

  cPanelMichael

  • May 29, 2019 18:29

  Hello @Sinus Pi, I was unable to reproduce this behavior on a test system. It's my understanding that this behavior is not excepted or intended, so a support ticket would help us to investigate the cause of the issue on the affected system. Thank you.

  0

Please sign in to leave a comment.