諸伺服器：修訂版本之間的差異

2023年2月9日 (四) 08:26的修訂版本

		DS110+		DS216+,DS218+,DS720+
OS		DSM5	DSM6	DSM7
M y S Q L	套件	MariaDB	MariaDB 5 (與DSM7不相容) MariaDB 10尚未使用	MariaDB 10
	版本	5.5.47-0037	5.5.68-MariaDB 5.5.5-10.3.29-MariaDB	5.5.5-10.3.32-MariaDB
	位置	/volume1/@appstore/MariaDB/usr/bin/mysqld /volume1/@appstore/MariaDB/etc/mysql/my.cnf /run/mysqld/mysqld.sock	MariaDB 5 同左 MariaDB10 同右 /run/mysqld/mysqld.sock /run/mysqld/mysqld10.sock	/volume1/@appstore/MariaDB10/usr/local/mariadb10/bin/mysqld /volume1/@appstore/MariaDB10/usr/local/mariadb10/etc/mysql/my.cnf /run/mysqld/mysqld.sock -> /run/mysqld/mysqld10.sock
	模組	DS110+		DS720+
	外掛	DS110+		auth plugin: mysql native password, mysql clear password, caching sha2 password, sha256 password

103.118.26.245
creation4everyteacher.net,educationmaker.net,gogopublic.net,science4everyone.net,quality-learning.net

全民科學平台的 /s4e/上線活動.php 的「代表圖」欄，欄值字首為 http:// 或 https:// 會觸發防火牆，回應 403 Forbidden 禁止讀網頁的動作

解決：

進 https://site:8443
「網站與域名 / science4everyone.net / WEB應用程式防火牆」
查日誌中的錯誤，查到：[client 114.35.52.233] ModSecurity: [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "179"] [id "33340162"] [rev "294"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: URL detected as argument, possible RFI attempt detected"] [data "%TX:1,TX:1"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "beginsWith %{request_headers.host}" against "TX:1" required. [hostname "science4everyone.net"] [uri "/s4e/\\xe4\\xb8\\x8a\\xe7\\xb7\\x9a\\xe6\\xb4\\xbb\\xe5\\x8b\\x95.php"] [unique_id "X2StPx6uRI04gbnBqU41uQAAAEs"]
因 beginsWith %{request_headers.host} 所以 Access denied with code 403，使用過濾規則 id "33340162"
關閉安全規則的清單中加入 33340162 。

@@ 第 11 行： / 第 11 行： @@
 <td style='font-size:smaller'>/volume1/@appstore/MariaDB10/usr/local/mariadb10/bin/mysqld<br/>/volume1/@appstore/MariaDB10/usr/local/mariadb10/etc/mysql/my.cnf<br/>/run/mysqld/mysqld.sock -> /run/mysqld/mysqld10.sock</td>
 </tr>
-<tr><th>模組</th><th>DS110+</th><th>DS218+</th><th>DS720+</th></tr>
+<tr><th>模組</th><th>DS110+</th><th></th><th>DS720+</th></tr>
-<tr><th>外掛</th><th>DS110+</th><th>DS218+</th><td>auth plugin:mysql native password,<br/>&emsp;mysql clear password,<br/>&emsp;caching sha2 password,<br/>&emsp;sha256 password</td></tr>
+<tr><th>外掛</th><th>DS110+</th><th></th><td>auth plugin:<br/>&emsp;mysql native password,<br/>&emsp;mysql clear password,<br/>&emsp;caching sha2 password,<br/>&emsp;sha256 password</td></tr>
 </table>