View Full Version : yet another 500 error ARG
RaMMSTeiN
12-7-01, 10:37 AM
ok i have checked all the forums...
and i tried everything..
but still i can't get vbulletin to get installed...
our site (www.lod-hq.net) is hosted on neptune.powweb.com
can someone check what the **** is going wrong here??...?? it suxs..
btw you ppl should install a normal PHP version.. cause then there no problems.. it is easy to install and allmost NONE problems with it
-----------------------------
Admin @ www.lod-hq.net & vice leader of euroLoD
http://kaladran.virtualave.net/Rammstein.gif
Stormwolves
12-7-01, 12:17 PM
I doubt they will install it. There is at least one security issue with the module version of php so far. The problem is that a malicious user could write a php script that will have read access to all folders of all other customers. That is because the mod_php will have the same access rights as the webserver so wherever the server can read, so can mod_php. The CGI Version can be started in the local context and does not have this weakness
(See comments to php manual, security section).
I have been asking about this for a long time, now, and the answers are beginning to sound more and more sour...
RaMMSTeiN
12-7-01, 07:05 PM
hmm strange why dont have other company's that problem here? wrong hosting material??? strang it is really.. cause then the most advanced sites (for me that is in netherlands) tweakers.net and Gathering.tweakers.net will have a great security risk which they can afford.. then powweb does something MAYOR wrong here..
There is absolutely NO security risk running the CGI method of PHP. In fact it is more secure than running mod_php.
Stormwolves
12-7-01, 08:28 PM
Starr - Nobody is saying that the CGI version is a risk... we are just asking ourselves why many other providers have php as a module running... that is all.
middleground
12-7-01, 08:39 PM
I still don't understand what the problem is. Especially when a majority of other hosts do it.
Maybe the inconvenience of a thousand is better than the possibility of one getting through a security hole???
I think there are other circumstances.
A thought- I am guessing the two will not run together??
So- a hell of a lot of sites would stop working if it was changed??
RaMMSTeiN
12-7-01, 11:46 PM
but someone can check what is wrong with me?..? thank
I was on a non CGI PHP server before this one and it got blasted. Once the vulnerability is exposed the actions are swift, intense, and devastating. It's not fun or funny. It takes little to adapt and the security is well worth the time it takes to modify your scripts. There's a good chance your troubles lie in places other than the fact that PowWeb serves up the CGI version of PHP.
middleground
12-8-01, 03:05 AM
Rammstein-
This is direct from vBulletin- I was checking into this a little while ago-
Check this vBulletin post-
http://www.vbulletin.com/forum/showthread.php?s=&threadid=24438
It details install in php cgi install.
RaMMSTeiN
12-8-01, 09:35 AM
thnx man ill check it out today :)
why did you ppl have problem with PHP?? you have to configure it so.. that none other ppl can acces the stuff.. otherwhise all mayor hosting providers will have BIGGGGG problemz.. i dont think that is the problem for you (my opinion)
vBulletin® v3.8.7, Copyright ©2000-2013, vBulletin Solutions, Inc.