Error in Sentinel admin ABConfig*.php scripts

New Member Joined: Mar 09, 2004 Posts: 14

Sentinel 2.5, even the most recent version, has several pages that die on my server

Apache 1.3 (latest), PHP 4.4.4, FastCGI, SuPHP, Suhosin (latest), and mail header patch from choon

When I attempt to visit any ABConfig*.php pages in Sentinel, I get an Error 500 result...

After debugging the script, it turns out the page is dying on this line of code:

Code:




$mailtest = @mail();


if(!$mailtest AND !stristr($_SERVER['SERVER_SOFTWARE'], "PHP-CGI")) {

So, I made the following change that fixed the error:

Code:




if(!mail() AND !stristr($_SERVER['SERVER_SOFTWARE'], "PHP-CGI")) {

btw, the @ mask was preventing an error from being logged, which made it hard for me to find the issue...

this is apparently an issue due to my configuration, but nuke security is secondary to my server's security, so i'm not changing my configuration

if you could make this change in your code, it should work fine for everyone.

thanks!

Posted: Fri Feb 09, 2007 8:15 pm

I believe that ampersand is there specifically to stop any sensitive data being shown in the browser in instances like yours where there was a problem.
Turning error reporting on in config should still have shown you where the error was - hope that helps.

Posted: Fri Feb 09, 2007 8:55 pm

it wasn't an ampersand, that would be a & symbol. the reason developers use the @ symbol, is to specifically mask any error from output. the problem here is that:
#1. the line of code in question kills the script
#2. the @ symbol prevents an error from displaying in the browser, and in this instance, also kept it from displaying in the error_log, which made it more troublesome in figuring out the problem

Regardless, I'm reporting this so that the developers can fix this in the sentinel code (very very simple fix...)

Posted: Fri Feb 09, 2007 8:57 pm

Sorry, my eyes are strained looking at code all day - of course you are correct, the & symbol looks nothing like the @ symbol