PHP Configuration: Difference between revisions


 
(6 intermediate revisions by the same user not shown)
Line 11: Line 11:


==Changing Your PHP Configuration==
==Changing Your PHP Configuration==
[[File:PhpConfigurationLocation.png]]


# [[Log into your Bravenet account]]
# [[Log into your Bravenet account]]
Line 25: Line 27:


# [[Log into your Bravenet account]]
# [[Log into your Bravenet account]]
# Click on the FTP Hosting tab
# Click on the Web Hosting tab
# Click on the [[Websites tab]]
# Look under the '''Manage Websites''' heading
# Click on [[Image:Globeicon.png]] '''Manage existing websites'''
# Select the website you wish to change the settings for from the list
# Select the website you wish to change the settings for from the list
# Now, click on the [[image:page_white_php.png]] '''PHP Configuration''' link
# Now, click on the '''PHP Configuration''' link
# Click on the '''reset your PHP configuration''' link on the right of the pop-up.
# Click on the '''reset your PHP configuration''' link on the right of the pop-up.
# When done, click on the '''Save Configuration''' link.  Note that it takes '''up to 15 minutes''' for the options to reset to default.
# When done, click on the '''Save Configuration''' link.  Note that it takes '''up to 15 minutes''' for the options to reset to default.
Line 36: Line 37:


==PHP Configuration Settings==
==PHP Configuration Settings==
'''Register Globals''' (default - off) - Register Globals changes the way that PHP deals with POST and GET variables.  Some older scripts require this to be turned on.  Otherwise, this should always be left off.  Turning on this setting can cause some pretty large security holes, so if your script requires you to turn this on, consider using a different script, or bug the author/vendor of the script to change their programming to no longer rely on this setting.  Note that future versions of PHP do not even support this option, so when we upgrade any scripts that depend on this setting will no longer work.


'''Display Errors''' (default - on) - This setting controls whether PHP errors should be shown.  Having this setting turned on is very useful when installing and setting up PHP programs, or when doing PHP development.  However, leaving it on in the long run may be a bad idea - certain error messages can give away some information about the workings of your site that you don't want random people knowing.
'''Display Errors''' (default - on) - This setting controls whether PHP errors should be shown.  Having this setting turned on is very useful when installing and setting up PHP programs, or when doing PHP development.  However, leaving it on in the long run may be a bad idea - certain error messages can give away some information about the workings of your site that you don't want random people knowing.


'''Allow URL Fopen''' (default - off) - This allows your PHP scripts to open files that are hosted elsewhere.  By default, PHP will only let you access files located on the same server as your main script.
'''Allow URL Fopen''' (default - off) - This allows your PHP scripts to open files that are hosted elsewhere.  By default, PHP will only let you access files located on the same server as your main script.
'''Magic Quote GPC''' (default - on) - This changes the way PHP handles the contents of GET, POST, and COOKIE variables.  In most cases, the default is fine, but some scripts require this to be turned off.


===Permananently Disabled Settings===
===Permananently Disabled Settings===

Latest revision as of 10:44, 8 May 2017

In some cases, a PHP script will require a specific configuration in order to function properly. Many such settings can be changed in your website's PHP Configuration settings. Each of your websites has its own PHP configuration.

For specific settings for specific scripts, you should refer to the requirements or the installation instructions of your script. We have tested several of the more popular scripts and collected our recommendations in the specific articles on this wiki - search for your package to see if we've written anything about it..

IMPORTANT - Changing the PHP configuration options may make result in decreased security for your website and its users. Furthermore, certain scripts may cease to function depending on their PHP configuration requirements.

The PHP Configuration window

Changing Your PHP Version

You can switch versions of PHP on an account-wide basis. For more info, see the section on Selecting a PHP Version

Changing Your PHP Configuration

PhpConfigurationLocation.png

  1. Log into your Bravenet account
  2. Click on the Web Hosting tab
  3. Look under the Manage Websites heading
  4. Select the website you wish to change the settings for from the list
  5. Now, click on the PHP Configuration link
  6. Change the settings as you need. A brief description of the available options are listed below.
  7. When done, click on the Save Configuration link.

Resetting Your PHP Configuration

If you've changed your PHP configuration in ways that your PHP scripts do not support, you may find that your site is behaving in unexpected ways. To reset to the default settings:

  1. Log into your Bravenet account
  2. Click on the Web Hosting tab
  3. Look under the Manage Websites heading
  4. Select the website you wish to change the settings for from the list
  5. Now, click on the PHP Configuration link
  6. Click on the reset your PHP configuration link on the right of the pop-up.
  7. When done, click on the Save Configuration link. Note that it takes up to 15 minutes for the options to reset to default.

Note that resetting your settings this way does not change any setting you define using .htaccess files or ini_set() PHP commands.

PHP Configuration Settings

Display Errors (default - on) - This setting controls whether PHP errors should be shown. Having this setting turned on is very useful when installing and setting up PHP programs, or when doing PHP development. However, leaving it on in the long run may be a bad idea - certain error messages can give away some information about the workings of your site that you don't want random people knowing.

Allow URL Fopen (default - off) - This allows your PHP scripts to open files that are hosted elsewhere. By default, PHP will only let you access files located on the same server as your main script.

Permananently Disabled Settings

For security reasons, we have disabled several features of PHP.

exec(), passthru(), proc_open(), shell_exec(), and system() - All these functions, and related functions that run or manipulate programs directly on the server, are disabled. They will not, and can not, be enabled for individual users. Scripts that rely on these functions will not run on our servers.

enable_dl - enable_dl is turned off, and thus prevents the use of dl(). This is partially a security issue, and partially due to the way we run PHP. It's not used by most web scripts, as many web servers do not support this.

Advanced Settings

If you don't see the setting that you are looking for on this screen, you will most likely have to enable it through an .htaccess file or through the ini_set() PHP command.