open_basedir restriction in effect.

dcjones

Hi all,

I have the following

User FTP account with access to:

/var/www/vhosts/mydomain.com/hal

I have a Cron job set to run:
/var/www/vhosts/mydomain.com/httpdocs/xlm/update.php

The update.php script opens a file in "/var/www/vhosts/mydomain.com/hal", or should I say tries to open the file.

I get "Warning: fopen() [function.fopen]: open_basedir restriction in effect. File(/var/www/vhosts/mydomain.com/hal/QGT.001) is not within the allowed path(s): "

If I run phpinfo.php the "open_basedir (Local value)" is set to "/var/www/vhosts/mydomain.com/httpdocs:/tmp" The "open_basedir (Master value)" is blank.

How can I perform the opening of the file "/var/www/vhosts/mydomain.com/hal/QGT.001" so the script can update it.

NogDog

Either (a) change the open_basedir setting, or (b) move the file of interest so that it is either in that httpdocs directory or one of its sub-directories.

dcjones

Hi NogDog,

I have just screwed up access to my web site.

While trying to cure my issue I did the following:

/usr/sbin/useradd -d /var/www/vhosts/mydomaion.com/httpdos/hal -s /bin/false USER_NAME

Set the password for the user, then

/usr/sbin/usermod -g psacln USER_NAME

chmod 755 /var/www/vhosts/mydomaion.com/httpdos/hal

chown USER_NAME:psacln /var/www/vhosts/mydomaion.com/httpdos/hal

chmod 751 /var/www/vhosts/mydomaion.com/httpdos

Now if I try to load my web site I get the following:

You don't have permission to access / on this server.

Can you help please.

bradgrafelman

dcjones wrote:
chmod 751 /var/www/vhosts/mydomaion.com/httpdos

Unless the Apache user is in the same group as that which owns the files, the '1' means that Apache won't have the "read" permission.

dcjones

Hi Brad,

Panic over, many thanks

dcjones

Hi Brad,

All this started with me trying to create a new FTP user but I think I have read far to much and got completely confussed.

Is this the right way to set up a new FTP user.

I want them to have access to a directory named "hal" only.

From the command line:

Step 1: # /usr/sbin/useradd -d /var/www/vhosts/mydomain.com/httpdocs/hal -s /bin/false USER_NAME

Step 2: passwd USER_NAME

Step 3: # /usr/sbin/usermod -G psacln USER_NAME

Step 4: # chmod 755 /var/www/vhosts/mydomain.com/httpdocs/hal

Steps 1 - 3, not a problem but its step 4. If I execute step 4 will it screw up any other users access

If you could advise please.