From 22bfa5e6f8152e492f21ae2c972a164474cfdd61 Mon Sep 17 00:00:00 2001
From: Tom Hughes <tom@compton.nu>
Date: Mon, 13 Jul 2020 19:12:20 +0100
Subject: [PATCH] Configure open_basedir for dmca site

---
 cookbooks/dmca/templates/default/apache.erb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/cookbooks/dmca/templates/default/apache.erb b/cookbooks/dmca/templates/default/apache.erb
index bf53e2d2e..592c0d336 100644
--- a/cookbooks/dmca/templates/default/apache.erb
+++ b/cookbooks/dmca/templates/default/apache.erb
@@ -47,6 +47,8 @@
   DocumentRoot <%= @directory %>/html
 
   Options -Indexes
+
+  ProxyFCGISetEnvIf "true" PHP_ADMIN_VALUE "open_basedir=<%= @directory %>/html/:/usr/share/php/:/tmp/\ndisable_functions=exec,shell_exec,system,passthru,popen,proc_open"
 </VirtualHost>
 
 <Directory <%= @directory %>/html>
-- 
2.39.5