Softaculous

Topic : How disable "check_suphp.php"'s call

Posted By: franceserv on October 21, 2021, 10:56 am

Hello,
I'm using Softaculous Enterprise with API since several months and all was working perfectly. Softaculous Enterprise is located on a second machine.

I disabled suPHP on my primary Web Server because it's less secure than PHP-FPM which is chrooted by Pool. I can't install back suPHP because it's useless, old and could be a security fail and bypass the chroot of PHP-FPM. My users are not limited inside their chroot folder.

The problem now is when I install something like Nextcloud or Owncloud, I can see Softaculous made at the end of install, an HTTP query at : ["GET /check_suphp.php HTTP/1.1" 200] and Softaculous remove all what he did previously ...
A PHP script (with engine likes PHP-FPM, mod, fcgid etc ... no matter the engine) can do what we ask to do, likes chmod() etc ...). So why do I need "suPHP" particularly ?
During the installation, I can see in folder the installation progress and all perms are correct. Then at the end, Softaculous call check_suphp.php and remove all what he did before.
How could I disable this check, as all the permissions are already correctly set by ACL user on the main Web Server ?
Thank you for your response.

Posted By: franceserv on October 21, 2021, 11:28 am | Post: 1

Oh I got quickly the content of the script "check_suphp.php" before it's deleted and the folder are not correct because Softaculoud don't know about the chroot change folder.
I will check the API documentation how to provide the correct folder, I hope it's possible.

Posted By: franceserv on October 21, 2021, 12:07 pm | Post: 2

The problem is this one :
I Install Nextcloud into this folder, thrown NFS :/home/ftp/test/www/test20210922.franceserv.com/

But inside the script check_suphp.php (and probably others) generated by Softaculous, I have this path :/home/ftp/test/www/test20210922.franceserv.com/***.php
Whereas I need this folder (because PHP is chrooted) :
/www/test20210922.franceserv.com/***.php
I tried with "replace_path" on the "adddomain" API call like this :'replace_path' => '/www/test20210922.franceserv.com',

But inside "check_suphp.php" I still have this wrong path :
/home/ftp/test/www/test20210922.franceserv.com/***.php
How could I solve this problem with the API, please ?

Posted By: franceserv on October 21, 2021, 12:58 pm | Post: 3

I found a way to process differently with a symbolic link to fake the chroot folder into the NFS Client of Softaculous.
But it could be great to do it with the API Call

Posted By: franceserv on October 21, 2021, 1:06 pm | Post: 4

But now, I have this error message : "Could not encrypt admin password because the domain is not pointing to the correct server" ...
I will open a ticket.

Posted By: Brijesh on October 28, 2021, 1:44 pm | Post: 5

Hi,

Sorry for the delay in response.

As per our discussion over support ticket we have made some changes to the Nextcloud or Owncloud to fix the suPHP check error due to incorrect path.

We are working on the next issue you are facing and once the issue is resolved we will be releasing the updated package of Nextcloud or Owncloud asap.

-----------------------
Webuzo - Multi User Hosting Control Panel
AMPPS - Best WordPress/PHP/MySQL development tool