Control Web Panel

WebPanel => CentOS 7 Problems => Topic started by: hanliong on May 03, 2021, 03:56:26 AM

Title: PHPDefender permission denied
Post by: hanliong on May 03, 2021, 03:56:26 AM

CWPPro has new feature at Security Center section, namely PHP Defender.
I have enabled it to prevent hacking attempt through PHP script.
But I got the error message: Could not open configuration file /usr/local/cwp/.conf/phpdefender/rules/cwp_php_defender_interm.rules : Permission denied
the file exist with chmod 640. Trying to change to chmod 644, but give the same error.
I use PHP selector PHP 7.3, PHP 7.4 and PHP 8.0. All of them are PHP-CGI, not PHP-FPM.

How to fix it?
Thanks.

Title: Re: PHPDefender permission denied
Post by: Sandeep on May 03, 2021, 04:42:46 AM

notified to devs they will look into it.

Title: Re: PHPDefender permission denied
Post by: hanliong on May 03, 2021, 05:32:47 AM

Quote from: Sandeep on May 03, 2021, 04:42:46 AM

notified to devs they will look into it.

I have notified the developer, but he said I have to pay for extra cost to buy CWP Support, and he will fix it for me.
Even, when I asked about the log path of PHP defender, he said I just bought CWP Pro which is not included any support. I have no idea, if just asking for the log path I have to pay for additional support. Then, he gave me the link to snuffleupagus website which CWP uses for PHP defender. But nothing can be used from the page of snuffleupagus. no log data information too, and no information about permission denied.

CWP said, I have to pay for extra support to fix it, because there is no problem at his server.
I'm so confuse. I dont ask him to modify my server or make other configuration. I just ask about CWP feature that I installed from the admn page. And it should be a bug he must fix, right? So, should I pay for extra cost for a CWP bug?

Thanks.

Title: Re: PHPDefender permission denied
Post by: Sandeep on May 03, 2021, 05:52:48 AM

don't worry create the support ticket again if possible and add this thread link there.

Title: Re: PHPDefender permission denied
Post by: hanliong on May 03, 2021, 06:00:57 AM

Quote from: Sandeep on May 03, 2021, 05:52:48 AM

don't worry create the support ticket again if possible and add this thread link there.

Ok, Sandeep, thanks for your information. I will try to open the new ticket.

Thanks.

Title: Re: PHPDefender permission denied
Post by: hanliong on May 03, 2021, 06:13:36 AM

I have opened the ticket with number: 140213
Thanks.

Title: Re: PHPDefender permission denied
Post by: iocare on August 02, 2021, 09:54:23 AM

I am also getting the same messages in the PHP defender log. Please help. I have CWP Pro

Title: Re: PHPDefender permission denied
Post by: mondor on May 13, 2024, 02:34:23 PM

php-fpm or php dont have write to enter at the end of path : /usr/local/cwp/.conf/phpdefender/rules where are the rules.

So i see two things at the moment:

1.
chmod 0655 /usr/local/cwp/.conf/
chmod 0655 /usr/local/cwp/.conf/phpdefender
chmod 0655 /usr/local/cwp/.conf/phpdefender/rules
chmod 0644 /usr/local/cwp/.conf/phpdefender/rules/*.rules

2.
depence of your php installed, search for snuffleupagus.ini and should be as ex: /opt/alt/php-fpm81/usr/php/php.d/snuffleupagus.ini
which contain something like:
;Snuffleupagus LIB
;defender_mode=basic
extension=snuffleupagus.so
sp.configuration_file=/usr/local/cwp/.conf/phpdefender/rules/cwp_php_defender_basic.rules

modify the value of sp.configuration_file with a new path of cwp_php_defender_basic.rules where php can read and access folder.
cp /usr/local/cwp/.conf/phpdefender/rules/cwp_php_defender_basic.rules /home/user/your-path/

and the new content of snuffleupagus.ini:
;Snuffleupagus LIB
;defender_mode=basic
extension=snuffleupagus.so
sp.configuration_file=/home/user/your-path/cwp_php_defender_basic.rules