PHP Log All Errors to a Log File to Get Detailed Information

Posted on in Categories Apache, Howto, lighttpd, Linux, php, Security, UNIX last updated March 28, 2016

PHP offers simple but effective solution to log all errors to a log fiie.
On all production web server you must turn off displaying error to end users via a web browser. Remember PHP gives out lots of information about path, database schema and all other sort of sensitive information. You are strongly advised to use error logging in place of error displaying on production web sites. The idea is quite simple only developer should able to see php error log.
Continue reading “PHP Log All Errors to a Log File to Get Detailed Information”

Lighttpd webserver wordpress image uploading problem – offers inline.php as download options

Posted on in Categories lighttpd, Linux, RedHat/Fedora Linux, Tips, Troubleshooting, UNIX last updated January 21, 2017

You can easily upload small files but large upload fails and offers inline.php as download option.

This error is caused because of improper php configuration. Make sure upload_tmp_dir is set and webserver user such as httpd/nobody/lighttpd can write to this directory.
$ grep upload_tmp_dir /etc/php.ini
OR
$ grep -iR upload_tmp_dir /etc/php/
Set upload_tmp_dir to /tmp or /var/tmp:
upload_tmp_dir = /var/tmp
Also set:
session.save_path = "/var/lib/php/sessions"
Next make sure web sever can write to temporary upload directory (only use this in chrooted jail):
# chown lighttpd:lighttpd /var/tmp
Now you should able to upload files. A final note if you need to upload files larger than 2MB set maximum allowed size for uploaded files using upload_max_filesize directive:
upload_max_filesize = 5M
Save and close the file. As usual restart lighttpd to make changes:
# /etc/init.d/lighttpd restart
OR
# systemctl restart lighttpd
Verify it:
# tail -f /var/log/messages
# tail -f /var/log/lighttpd/error.log