Vesta Control Panel - Forum

Missing open_basedir in /etc/php-fpm.d/*.conf files. How to structurally fix this in the php-fpm template? The vestacp version I'm using is 0.9.8-16

I noticed by running this php file which successfully dumps the system file:


<?php
echo file_get_contents('/etc/passwd');


After investigating I ...

Vesta adds mysql user with both host "localhost" and "%". This means every mysql user is exposed to remote login from every host. The vestacp version is 0.9.8-16

To me this sounds as a security risk. Remote access from any host should be avoided. Other control panels do allow this to be configured ...

I noticed that vestacp uses php-fpm and configures for every user account a different port starting with port 9000. You can find the configuration files in /etc/php-fpm.d/

I would think that communication via unix sockets will be faster then via local ports. Are there other people who know more ...