diff --git a/install/tpl/apache_ispconfig.conf.master b/install/tpl/apache_ispconfig.conf.master index be6f637b7bfcb6131714558bcc84c6f2ae22717d..9086033101f6988868fff9328658658624d61894 100644 --- a/install/tpl/apache_ispconfig.conf.master +++ b/install/tpl/apache_ispconfig.conf.master @@ -18,6 +18,7 @@ CustomLog "| /usr/local/ispconfig/server/scripts/vlogger -s access.log -t \"%Y%m # Do not allow access to the root file system of the server for security reasons <Directory /> + Options -Indexes AllowOverride None <tmpl_if name='apache_version' op='>' value='2.2' format='version'> Require all denied diff --git a/server/conf/vhost.conf.master b/server/conf/vhost.conf.master index 5a110cc119beb89a92952bf1a6a024cac462bd04..0dd805af8470f5de703de957507d9431958be271 100644 --- a/server/conf/vhost.conf.master +++ b/server/conf/vhost.conf.master @@ -57,6 +57,10 @@ </IfModule> <Directory {tmpl_var name='web_document_root_www'}> + # Clear PHP settings of this website + <FilesMatch ".+\.ph(p[345]?|t|tml)$"> + SetHandler None + </FilesMatch> Options +FollowSymLinks AllowOverride <tmpl_var name='allow_override'> <tmpl_if name='apache_version' op='>' value='2.2' format='version'> @@ -85,6 +89,10 @@ </tmpl_if> </Directory> <Directory {tmpl_var name='web_document_root'}> + # Clear PHP settings of this website + <FilesMatch ".+\.ph(p[345]?|t|tml)$"> + SetHandler None + </FilesMatch> Options +FollowSymLinks AllowOverride <tmpl_var name='allow_override'> <tmpl_if name='apache_version' op='>' value='2.2' format='version'> @@ -186,10 +194,6 @@ SuexecUserGroup <tmpl_var name='system_user'> <tmpl_var name='system_group'> </IfModule> </tmpl_if> - # Clear PHP settings of this website - <FilesMatch ".+\.ph(p[345]?|t|tml)$"> - SetHandler None - </FilesMatch> <tmpl_if name='php' op='==' value='mod'> # mod_php enabled AddType application/x-httpd-php .php .php3 .php4 .php5 @@ -336,7 +340,7 @@ RewriteCond %{REQUEST_URI} !^<tmpl_var name='rewrite_target'> </tmpl_if> - RewriteRule ^/(.*)$ <tmpl_var name='rewrite_target'><tmpl_if name="rewrite_add_path" op="==" value="y">$1</tmpl_if> <tmpl_if name='rewrite_type' value=''><tmpl_if name="rewrite_is_url" op="==" value="n">[PT]</tmpl_if></tmpl_else><tmpl_var name='rewrite_type'></tmpl_if> + RewriteRule ^/(.*)$ <tmpl_var name='rewrite_target'><tmpl_if name="rewrite_add_path" op="==" value="y">$1</tmpl_if> <tmpl_var name='rewrite_type'> </tmpl_loop> </tmpl_if> diff --git a/server/plugins-available/apache2_plugin.inc.php b/server/plugins-available/apache2_plugin.inc.php index 5f81fa671443ba6adc1801d3d4cba65b63c00d4b..e3833b03ac14fd8874489ad432c2cb8b6f396a9a 100644 --- a/server/plugins-available/apache2_plugin.inc.php +++ b/server/plugins-available/apache2_plugin.inc.php @@ -2654,7 +2654,7 @@ class apache2_plugin { $fpm_socket = $socket_dir.$pool_name.'.sock'; $tpl->setVar('fpm_socket', $fpm_socket); - $tpl->setVar('fpm_listen_mode', '0600'); + $tpl->setVar('fpm_listen_mode', '0660'); $tpl->setVar('fpm_pool', $pool_name); $tpl->setVar('fpm_port', $web_config['php_fpm_start_port'] + $data['new']['domain_id'] - 1);