Ioncube & Register Global Questions

[bradandersen]

Hello,

 

I have Ioncube installed and working just fine, but the 3.1.1 install script does not want to believe it:

 

Site error: the file /home/aanetsyn/public_html/billing/install/install.php requires the ionCube PHP Loader ioncube_loader_lin_4.4.so to be installed by the site administrator.

 

But Ioncube is working just fine:

 

# php ioncube-encoded-file.php

This file has been successfully decoded. ionCube Loaders are correctly installed

 

An ionCube Loader is already installed and run-time loading is unnecessary.

Encoded files should load without problems.

 

Zend is installed and using this config in php.ini:

[Zend]

zend_extension_manager.optimizer=/usr/local/Zend/lib/Optimizer-2_6_2

zend_extension_manager.optimizer_ts=/usr/local/Zend/lib/Optimizer_TS-2_6_2

zend_optimizer.version=2.6.2

zend_extension=/usr/local/ioncube/ioncube_loader_lin_4.4.so

zend_extension=/usr/local/Zend/lib/ZendExtensionManager.so

zend_extension_ts=/usr/local/Zend/lib/ZendExtensionManager_TS.so

 

Also, I really hope you understand the security risks of using "Register Globals = On". This is the same VERY POOR security practice that allowed LPanel to be hacked so easily. If you can modify your code to NOT use Register Global, then I would highly recommend it.

 

Thanks,

Brad

[Adam]

Hello,

 

I have Ioncube installed and working just fine, but the 3.1.1 install script does not want to believe it:

 

Site error: the file /home/aanetsyn/public_html/billing/install/install.php requires the ionCube PHP Loader ioncube_loader_lin_4.4.so to be installed by the site administrator.

 

Try uploading these loaders

http://downloads2.ioncube.com/loader_downloads/ioncube_loaders_lin_x86.tar.gz

to

/home/aanetsyn/public_html/billing/

 

 

Also, I really hope you understand the security risks of using "Register Globals = On". This is the same VERY POOR security practice that allowed Lpanel to be hacked so easily. If you can modify your code to NOT use Register Global, then I would highly recommend it.

 

Using register globals it self does not make the script "hacked" its poor coding that does. WHMCS uses an extensive check system to make sure this won't happen as it did to Lpanel. However WHMCS will be slowly getting ride of the use of register globals....

 

From,

Adam

[bradandersen]

Hi Adam,

 

Thank you, I'm glad to hear that WHMCS is security minded. However, I am still having problems even after having copied the new loaders to .../billing and .../install:

 

Site error: the file /home/aanetsyn/public_html/billing/install/install.php requires the ionCube PHP Loader ioncube_loader_lin_4.4.so to be installed by the site administrator.

 

 

Okay, the problem was that I had local copies of php.ini with register_globals=on in the billing and install directories. I modified the global system php.ini and removed the local copies and now it is working just fine.

 

Thanks,

Brad

[PPH]

whenever you use php overides in a local .ini you must add the zend + ioncube lines or they are dropped.

[bradandersen]

Thus, I have a php.ini file in my whmcs directory (or any directory above it) that looks like this, and now everything works:

 

>cat php.ini

 

register_global=on

 

[Zend]

zend_extension_manager.optimizer=/usr/local/Zend/lib/Optimizer-3.2.8

zend_extension_manager.optimizer_ts=/usr/local/Zend/lib/Optimizer_TS-3.2.8

zend_optimizer.version=3.2.8

zend_extension=/usr/local/ioncube/ioncube_loader_lin_4.4.so

 

zend_extension=/usr/local/Zend/lib/ZendExtensionManager.so

zend_extension_ts=/usr/local/Zend/lib/ZendExtensionManager_TS.so