View Full Version : Outdated host using outdated software
jennifer55 08-25-2002, 09:30 PM How hard is it for a webhost to update php using ensim?
My current host thinks php installed a year ago is fine the way it is and sees no need to update the software. Their motto is if it ain't broke don't fix it. Can anyone post some help on exactly how to update php just in case the company is reading these forums since WebHostingTalk is one of the primary places they solicit at. Scripts have been verified to function only under the latest php release.
Watch this space for the name of the company in the coming days if nothing is done to fix the problem.
leoking 08-25-2002, 09:34 PM Why don't you ask them to update the software
jennifer55 08-25-2002, 09:39 PM They said they would get to it and I keep waiting. Can I update php myself?
dandanfirema 08-25-2002, 09:39 PM While I agree with the "if it ain't broke, don't fix it" motto, PHP prior to version 4.2.2 is broke! There is a security vulnerability in some versions of PHP. The story is here: http://www.php.net/release_4_2_2.php
However, regarding how easy it is to upgrade. It usually takes about 30 minutes. I am running 4.2.2 on my ensim box. Good luck with your requests. However, I don't think posting their name here is much leverage. If they are unwilling to accomodate you, vote with your pocketbook....move on.
Good luck.
jennifer55 08-25-2002, 09:52 PM As long as I save other people from the grief of having to deal with this company's lack of support. I didn't know about php needing to be update until I had multiple emails with the company that created the scripts questioning whether I was using the latest php or older versions.
dandanfirema 08-25-2002, 09:55 PM Well typically hosts shouldn't go about upgrading PHP anytime there is a new version, because it could just as easily break customers scripts as it might make yours work. But if there are security reasons, it should be upgraded immediately. If they have bad support, you should move. If you wanted to stay with them, you might ask if they have a server with the newer version they could move you to.
Gary King 08-25-2002, 10:02 PM What version of PHP are they running?
leoking 08-25-2002, 10:08 PM Yes.Hosting company should choose a new and stable version.
jennifer55 08-25-2002, 10:16 PM PHP Version 4.0.6
ensim 2.4
Apr 2001
Does that look right?
phpcoder 08-25-2002, 10:17 PM Its not that old ;) I wonder how many security holes are in the version?
dandanfirema 08-25-2002, 10:17 PM Looks like standard ensim issue to me. How long have you been waiting?
cactus 08-25-2002, 10:25 PM Have you check what version your Host is currently using? If you haven't done it , I would suggest creating a file phpinfo.php and upload it to the server.
Recall the file and you should be able to see a long page full of system and enviroment information. This information is very helpful when you are trying to figure out what's available to you.
Regards.
jennifer55 08-25-2002, 10:29 PM Long enough dandanfirema
dandanfirema 08-25-2002, 10:38 PM :(
So, like I said before, vote with your money...if they don't serve you, find someone who will.
jennifer55 08-25-2002, 11:17 PM Ok I have a question how come none of you guys here on WHT show up in Google under features I'm looking up. I only found about 150 sites that matched these keywords gb "unlimited subdomains" ftp php mysql -reseller. I would figure a webhosting company to design a site best suited for the internet.
http://www.google.com/search?q=gb+%22unlimited+subdomains%22+ftp+php+mysql+-reseller&num=100
I saw a few on the first page of search results that post here.
Pilgrim 08-26-2002, 04:37 AM Ah, that would be because the word reseller is not on our site :)
And although I'm running 6 paid google ads the word "unlimited" is listed as a negative keyword so ... no go.
tilted 08-26-2002, 09:36 AM It's also important to understand that there are two versions of Ensim's WEBppliance. The standalone version is easier to hack than the ServerXchange version. If your host is using SX, I agree with Dan about asking them if they can move you to one of their other servers that has the version of PHP you want. If they can't accomodate you, you should understand that bargain that comes along with virtual hosting is that you usually can't be the one telling the bus driver where to drive the bus. Changes to perl/modules/php on virtual hosting machines can very easily ruin the ride for a lot of other people riding the same bus you are.
I should avoid analogies this early in the morning. :rolleyes:
George
UmBillyCord 08-26-2002, 12:09 PM Originally posted by tilted
It's also important to understand that there are two versions of Ensim's WEBppliance. The standalone version is easier to hack than the ServerXchange version.
What are you talking about? You may want to clarify, because as it stands this is a rediculous statement.
Originally posted by jennifer55
Ok I have a question how come none of you guys here on WHT show up in Google under features I'm looking up.
Maybe because there are over 18,000 web host in the world and WHT host make up a small fraction. Plus many of the host who come hear are just starting out.
modihost 08-26-2002, 12:50 PM PHP 4.2.2 released in response to vulnerability
[22-Jul-2002] The PHP Group today announced the details of a serious vulnerability in PHP versions 4.2.0 and 4.2.1. A security update, PHP 4.2.2, fixes the issue. Everyone running affected versions of PHP is encouraged to upgrade immediately. The new 4.2.2 release doesn't include other changes, so upgrading from 4.2.1 is safe and painless.
i am sure all of that software is loaded with security holes :D
Not good to old server versions on the servers, wonder if i could hunt down any exploits for that php version :D
j/k
Originally posted by Pilgrim
Ah, that would be because the word reseller is not on our site :)But the minus sign jennifer55 had in front of "reseller" in her query would mean that only pages without that word would be returned: "unlimited subdomains" ftp php mysql -reseller
But you did hit on one thing: few of the WHT-prominent hosts will have the word "unlimited" on their sites, whether associated with subdomains or anything else.
Also, jennifer55, by excluding "reseller" you'll be leaving out a lot of hosts that offer reseller plans. That is, they might have exactly what you want, but also offer reseller plans and have a link to a "reseller" page on a page that would have perfectly described what you're looking for. You wouldn't see those pages using the above query.
bitserve 08-27-2002, 12:04 AM Originally posted by Pilgrim
Ah, that would be because the word reseller is not on our site :)
And although I'm running 6 paid google ads the word "unlimited" is listed as a negative keyword so ... no go.
:) We had "unlimited" and "free" as negative when we used google's adwords.
ikellen 08-27-2002, 01:05 AM In terms with the PHP, I am happy with most of the releases after 4.1. Haven't had any security problems, and I like thos better than 4.2* because with 4.2+ you have to define form variables as $_GET[variable] instead of just $variable. If you really feel that you need the upgrade, see if your host will do it, otherwise if it were me I would stick with 4.0-4.1.
Dunthank 08-27-2002, 02:10 PM Ensim servers are the pits when it comes to upgrading things like PHP. We've got one that we won't touch. We've been flat out told that Ensim has to release a build for it, which they are slow to do. It isn't the host on this one, they're telling you straight. It is frustrating...
dandanfirema 08-27-2002, 02:27 PM Thats not entirely true. Some things can be updated without problems. We are running PHP 4.2.2 on an ensim 3.0 box.
Gyrbo 08-27-2002, 04:53 PM Originally posted by ikellen
In terms with the PHP, I am happy with most of the releases after 4.1. Haven't had any security problems, and I like thos better than 4.2* because with 4.2+ you have to define form variables as $_GET[variable] instead of just $variable. If you really feel that you need the upgrade, see if your host will do it, otherwise if it were me I would stick with 4.0-4.1.
If you want, you can turn it off in 4.0.6(+) as easy as you can turn it on in 4.2+
This doesn't make any sense...
|