Jump to content

Recommended Posts

Posted

I'm moving my forums to a new server.  I'm trying to retain as much of my current server settings in my new server, but I have a few questions on items that appear to be legacy and no longer needed.

 

  • Lightspeed - can I use it?  Is it supported? Should I continue to use PHP-FPM?
  • Core 
    • allow_url_fopen: Currently enabled. This setting allows PHP to retrieve remote URL objects like files. It is often disabled for security reasons. Can I disable it?
    • disable_functions: This blocks listed functions from running within PHP. These functions are commonly used in security breaches.  Are there any exemptions?
    • doc_root: Used to include scripts and executables in the web server document directories and is considered insecure. Do I need to use it?
    • error_log: The default location where the error logs are written. Does the path matte 
  • curl
    • cURL Information: This is the version of cURL used by the PHP package specific to the OS. An updated version may not work the same or have problems installing. See issue.
      • NTLMWB: Used to forward authentication to curl requests using the NTLMWB protocol. This is likely set as the default and different in cURL 7 vs 8. I’m not sure where this setting would be used, or if this setting will have any effect on the applications.
      • PSL: Similar to NTLMWB above.
      • Protocols: These are protocols that curl are allowed to use. The ws and wss protocols are used for web socket communication where the latter is the secure version being done over HTTPs. These are likely the defaults in cURL 7 vs 8.  Any recommendations?
  • dba
    • DBA support: Enables PHP to use database abstraction (DBA). It is not likely the forums are using this, and it probably does not need to be enabled. True? 
  • enchant
    • A spelling PHP extension.
    • I do not see this as required by the forum. Probably not needed. True?
  • ionCube Loader
    • Used to decode files encoded with the IonCube PHP Encoder.
    • Is this required for the forums?
  • snmp
    • Enables support for managing remote devices using the Simple Network Management Protocol.
    • Is this required?.
  • Zend OPcache
    • An opcode cache for PHP.
    • Not required by the forums, correct?

 

Posted (edited)
2 hours ago, bassangler said:

Lightspeed - can I use it?  Is it supported? Should I continue to use PHP-FPM?

It's not officially supported.  The only web server supported is Apache.  

2 hours ago, bassangler said:

disable_functions: This blocks listed functions from running within PHP. These functions are commonly used in security breaches.  Are there any exemptions?

There are some functions that IPB will prompt you to disable if they're not already.  The software will continue to work, but it's recommended you disable them to improve your security.  

2 hours ago, bassangler said:

allow_url_fopen: Currently enabled. This setting allows PHP to retrieve remote URL objects like files. It is often disabled for security reasons. Can I disable it?

If you really want to disable this, you should be able to.  There might be areas that don't work properly without this.  In searching this forum for fopen, most of the results have been around 3rd party resources.  So definitely check any that you utilize.  

2 hours ago, bassangler said:

curl

This is required.

2 hours ago, bassangler said:
  • dba
    • DBA support: Enables PHP to use database abstraction (DBA). It is not likely the forums are using this, and it probably does not need to be enabled. True? 
  • enchant
    • A spelling PHP extension.
    • I do not see this as required by the forum. Probably not needed. True?
  • ionCube Loader
    • Used to decode files encoded with the IonCube PHP Encoder.
    • Is this required for the forums?
  • snmp
    • Enables support for managing remote devices using the Simple Network Management Protocol.
    • Is this required?.
  • Zend OPcache
    • An opcode cache for PHP.
    • Not required by the forums, correct?

These are not needed.

For the most part, run the compatibility checker to see what is required for the software to run.

 

Edited by Randy Calvert
Posted (edited)
3 hours ago, bassangler said:
  • doc_root: Used to include scripts and executables in the web server document directories and is considered insecure. Do I need to use it?
  • error_log: The default location where the error logs are written. Does the path matte 

Forgot these...  doc_root is not needed by the software.  IPB itself is not aware of error_log.  The path does not matter to IPB, but you might want to be aware of where the various error log files are written for your server.

Quote

Should I continue to use PHP-FPM?

IPB itself does not care about how you run PHP.  I personally would run it as FPM instead of as a CGI/FastCGI, mod_php, or suPHP.  

Edited by Randy Calvert
Posted (edited)
9 hours ago, Randy Calvert said:

It's not officially supported.  The only web server supported is Apache.  

Litespeed is not on the official support list, but it works just fine, or rather waaaay better than Apache for some of us.

If I was you I'd only consider keeping it if the extra $10-15/month isn't an issue for you for that Litespeed license.

Edited by Miso
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...