When PHP is not running in user mode, it asks for FTP login details.
Evidentally, my php is not running in user mode as it asks for my ftp login details. It is entirely probable that I do not understand how this works, but is it a big ftp security concern to post my ftp login details into phar so that it can connect to my ftp server? Can this information be retained on your end? Also, is there a way to input the ftp port number when running on a non-standard port?
Maybe a better question is how to put php in user mode. I have been googling but I don't understand, yet. I have always used it in a default install with no changes. I also read where "safe mode" was deprecated in version 5.3 or 5.4 so it would not apply to me in version 5.5. But then, I am testing on a server where I am root and there are no other user accounts on it. It is not a shared hosting server.
Server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS):
Devuan beowulf / Apache 2.4.46 / MariaDB 10.3 / PHP 7.4 / DF 9.x (updated)
DJ MazeOffline
Joined: Apr 19, 2004
Posts: 6460
Location: http://tinyurl.com/5z8dmv
Evidentally, my php is not running in user mode as it asks for my ftp login details. It is entirely probable that I do not understand how this works, but is it a big ftp security concern to post my ftp login details into phar so that it can connect to my ftp server? Can this information be retained on your end? Also, is there a way to input the ftp port number when running on a non-standard port?
If you use HTTP instead of HTTPS then yes, your FTP details will be transferred insecurely once.
But then again, if you use an FTP application and don't use SSL/TLS for the connection, the same is the issue.
The phar installer itself uses TLS when available.
No the FTP credentials will not be send to our end (you can check that by extracting the phar file).
warden wrote
Maybe a better question is how to put php in user mode. I have been googling but I don't understand, yet. I have always used it in a default install with no changes. I also read where "safe mode" was deprecated in version 5.3 or 5.4 so it would not apply to me in version 5.5. But then, I am testing on a server where I am root and there are no other user accounts on it. It is not a shared hosting server.
Thank you DJ! I recently configured a nginx server with php-fpm, so this will be a first with apache. That article you linked to was excellent. Thanks again.
Server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS):
Devuan beowulf / Apache 2.4.46 / MariaDB 10.3 / PHP 7.4 / DF 9.x (updated)
wardenOffline
Joined: Dec 16, 2004
Posts: 229
Location: North Carolina
I have apache2 (v.2.4.x) with php5-fpm (devuan-jessie) configured for user mode.
I then used the phar download script and it is great!
However, in installing the DF script, the database configuration script only picked up the mysqli, and not the MariaDB (mysql) database. Is this an installer bug or do I need to revert back to mysql database? I only installed MariaDB to test it out anyway. It has served as a perfect "drop-in" replacement for mysql, so far.
In case you are wondering, yes, I did check that the mysql service is running, 😀
Server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS):
Devuan beowulf / Apache 2.4.46 / MariaDB 10.3 / PHP 7.4 / DF 9.x (updated)
DJ MazeOffline
Joined: Apr 19, 2004
Posts: 6460
Location: http://tinyurl.com/5z8dmv
MariaDB = Percona = MySQL and MySQLi is the php driver
That's the good and bad part of forks
I've modified the installer to make that clear in the select option at install
Server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS):
Fedora 25 / Apache 2.4.27 / MariaDB 10.1.26 / PHP 7.1.10 / Mercurial
Last edited by DJ Maze on Sun Feb 28, 2016 4:57 pm; edited 2 times in total
rosbifOffline
Joined: Jan 13, 2005
Posts: 721
Location: Paris, France
I'm just trying a v10 DF install to see what it's like with my existing themes etc. I've never used mercurial etc. and am no expert! So I've installed this version using the Phar install which worked a treat, thank you. So what do I do now to ensure that DF10 is kept up to date with bug fixes etc? I'd appreciate easy to understand step-by-step instructions from here!
Server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS):
DJ MazeOffline
Joined: Apr 19, 2004
Posts: 6460
Location: http://tinyurl.com/5z8dmv
I'm using installer to test and create new site and I found that last link to "Go to setup script" doesn't work correctly. It has an extra "/" at the begining
until the next (Bye),
Server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS):
Dragonfly 9.2 (PHP5.4)