pfSense

#!/bin/sh

#

#	rc.php_ini_setup

#	Copyright (C) 2010 Scott Ullrich <sullrich@gmail.com>

#	All rights reserved.

#

#	Redistribution and use in source and binary forms, with or without

#	modification, are permitted provided that the following conditions are met:

#

#	1. Redistributions of source code must retain the above copyright notice,

#	   this list of conditions and the following disclaimer.

#

#	2. Redistributions in binary form must reproduce the above copyright

#	   notice, this list of conditions and the following disclaimer in the

#	   documentation and/or other materials provided with the distribution.

#

#	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,

#	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY

#	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE

#	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,

#	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF

#	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS

#	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN

#	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

#	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

#	POSSIBILITY OF SUCH DAMAGE.

# Set our operating platform

PLATFORM=`/bin/cat /etc/platform`

if [ -d /usr/local/lib/php/20090626 ]; then

	EXTENSIONSDIR="/usr/local/lib/php/20090626/"

else

	EXTENSIONSDIR="/usr/local/lib/php/20060613/"

fi

# Grab amount of memory that is detected

if [ -f /var/log/dmesg.boot ]; then

	AVAILMEM=`/bin/cat /var/log/dmesg.boot |/usr/bin/awk '/avail memory/ { memory=($4 / 1048576); printf("%0.0f\n", memory); exit}'`

else 

	AVAILMEM=`/sbin/dmesg -a |/usr/bin/awk '/avail memory/ { memory=($4 / 1048576); printf("%0.0f\n", memory); exit}'`

fi

if [ -z "$AVAILMEM" ]; then

	MEM=`/sbin/sysctl hw.physmem | cut -d':' -f2`

	AVAILMEM=`/bin/expr $MEM / 1048576`

fi

# Calculate APC SHM size according 

# to detected memory values

if [ "$AVAILMEM" -lt "65" ]; then

	APCSHMEMSIZE="1M"

fi

if [ "$AVAILMEM" -lt "96" ]; then

	APCSHMEMSIZE="5M"

fi

if [ "$AVAILMEM" -lt "128" ]; then

	APCSHMEMSIZE="10M"

fi

if [ "$AVAILMEM" -gt "128" ]; then

	APCSHMEMSIZE="15M"

fi

if [ "$AVAILMEM" -gt "256" ]; then

	APCSHMEMSIZE="20M"

fi

if [ "$AVAILMEM" -gt "384" ]; then

	APCSHMEMSIZE="25M"

fi

if [ "$AVAILMEM" -gt "512" ]; then

	APCSHMEMSIZE="30M"

fi

if [ "$AVAILMEM" -gt "784" ]; then

	APCSHMEMSIZE="35M"

fi

# Set upload directory

if [ "$PLATFORM" = "embedded" -o "$PLATFORM" = "nanobsd" ]; then

	UPLOADTMPDIR="/root"

else 

	UPLOADTMPDIR="/tmp"

fi

# Define php modules.  Do not add .so, it will  

# be done automatically by the script below.

PHPMODULES="apc"

PHPMODULES="$PHPMODULES standard"

# Downloading via HTTP/FTP (pkg mgr, etc)

PHPMODULES="$PHPMODULES curl date"

# Internationalization 

PHPMODULES="$PHPMODULES gettext"

# User manager

PHPMODULES="$PHPMODULES ldap openssl pcntl"

PHPMODULES="$PHPMODULES mhash"

PHPMODULES="$PHPMODULES mcrypt"

# Regexs, PERL style!

PHPMODULES="$PHPMODULES pcre"

# The mighty posix!

PHPMODULES="$PHPMODULES posix"

PHPMODULES="$PHPMODULES readline"

# Login sessions

PHPMODULES="$PHPMODULES session"

# Extra sanity seatbelts

PHPMODULES="$PHPMODULES suhosin"

# Firewall rules edit

PHPMODULES="$PHPMODULES ctype"

# Config read/write

PHPMODULES="$PHPMODULES xml xmlreader xmlwriter libxml"

PHPMODULES="$PHPMODULES simplexml"

# firewall_rules_edit.php

PHPMODULES="$PHPMODULES mbstring"

# Synchronization primitives

PHPMODULES="$PHPMODULES shmop"

# Page compression

PHPMODULES="$PHPMODULES zlib"

# SQLlite & Database

PHPMODULES="$PHPMODULES spl"

PHPMODULES="$PHPMODULES pdo"

PHPMODULES="$PHPMODULES sqlite"

# ZeroMQ

PHPMODULES="$PHPMODULES zmq"

# SSH2

PHPMODULES="$PHPMODULES ssh2"

# pfSense extensions

PHPMODULES="$PHPMODULES pfSense"

PHP_ZEND_MODULES="ioncube_loader"

PHP_ZEND_MODULES_TS="ioncube_loader_ts"

# Modules previously included.

# can be turned on by touching

# /etc/php_dynamodules/$modulename

#	sysvmsg \

#	sysvsem \

#	sysvshm \

#	bcmath \

#	tokenizer \

#	uploadprogress \

#	sockets \

#	Reflection \

#	mysql \

#	bz2	\

#	json \

# Clear the .ini file to make sure we are clean

if [ -f /usr/local/etc/php.ini ]; then

	/bin/rm /usr/local/etc/php.ini

fi

if [ -f /usr/local/lib/php.ini ]; then

	/bin/rm /usr/local/lib/php.ini

fi

LOADED_MODULES=`/usr/local/bin/php -m | /usr/bin/grep -v "\["`

# Get a loaded module list in the stock php

# Populate a dummy php.ini to avoid

# the file being clobbered and the firewall

# not being able to boot back up.

/bin/cat >/usr/local/lib/php.ini <<EOF

; File generated from /etc/rc.php_ini_setup

output_buffering = "0"

expose_php = Off

implicit_flush = true

magic_quotes_gpc = Off

max_execution_time = 99999999

max_input_time = 99999999

set_time_limit = 0

register_argc_argv = On

file_uploads = On

upload_tmp_dir = ${UPLOADTMPDIR}

upload_max_filesize = 100M

post_max_size = 100M

html_errors = Off

zlib.output_compression = Off

zlib.output_compression_level = 1

include_path = ".:/etc/inc:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg"

;display_startup_errors=off

;display_errors=off

log_errors=on

error_log=/tmp/PHP_errors.log

extension_dir=${EXTENSIONSDIR}

; Extensions

EOF

# Copy php.ini file to etc/ too (cli)

/bin/cp /usr/local/lib/php.ini /usr/local/etc/php.ini

# Ensure directory exists

if [ ! -d /etc/php_dynamodules ]; then

	/bin/mkdir /etc/php_dynamodules

fi

if [ ! -d /etc/php_dynamodules_zend ]; then

	/bin/mkdir /etc/php_dynamodules_zend

fi

if [ ! -d /etc/php_dynamodules_zend_ts ]; then

	/bin/mkdir /etc/php_dynamodules_zend_ts

fi

# Read in dynamodules

if [ -d /etc/php_dynamodules ]; then

	DYNA_MODULES=`/bin/ls -Utr /etc/php_dynamodules/`

	PHPMODULES="$PHPMODULES $DYNA_MODULES"

fi

# Read in zend modules

if [ -d /etc/php_dynamodules_zend ]; then

	DYNA_MODULES=`/bin/ls /etc/php_dynamodules_zend/`

	PHP_ZEND_MODULES="$PHP_ZEND_MODULES $DYNA_MODULES"

fi

# Read in zend threaded modules

if [ -d /etc/php_dynamodules_zend_ts ]; then

	DYNA_MODULES=`/bin/ls /etc/php_dynamodules_zend_ts/`

	PHP_ZEND_MODULES_TS="$PHP_ZEND_MODULES_TS $DYNA_MODULES"

fi

# Loop through and generate modules to load.

# Take into account modules built into php.

for EXT in $PHPMODULES; do

	SHOULDADD="true"

	# Check to see if module is compiled into php statically

	for LM in $LOADED_MODULES; do

		if [ "$EXT" = "$LM" ]; then

			SHOULDADD="false"

		fi

	done

	if [ "$SHOULDADD" = "true" ]; then

		# Ensure extension exists before adding.

		if [ -f "${EXTENSIONSDIR}${EXT}.so" ]; then

			echo "extension=${EXT}.so" >> /usr/local/lib/php.ini

		fi

	fi

done

# Zend modules

for EXT in $PHP_ZEND_MODULES; do

	# Ensure extension exists before adding.

	if [ -f "${EXTENSIONSDIR}/ioncube/${EXT}.so" ]; then

		echo "zend_extension=${EXTENSIONSDIR}/ioncube/${EXT}.so" >> /usr/local/lib/php.ini

	fi

done

# Zend threaded modules

for EXT in $PHP_ZEND_MODULES_TS; do

	# Ensure extension exists before adding.

	if [ -f "${EXTENSIONSDIR}/ioncube/${EXT}.so" ]; then

		echo "zend_extension_ts=${EXTENSIONSDIR}/ioncube/${EXT}.so" >> /usr/local/lib/php.ini

	fi

done

# Get amount of ram installed on this system

RAM=`/sbin/sysctl hw.realmem | /usr/bin/awk '{print $2/1000000}' | /usr/bin/awk -F '.' '{print $1}'`

export RAM

export LOWMEM

if [  "$RAM" -gt 96 ]; then

	/bin/cat >>/usr/local/lib/php.ini <<EOF

; APC Settings

apc.enabled="1"

apc.enable_cli="0"

apc.shm_size="${APCSHMEMSIZE}"

EOF

else

	LOWMEM="TRUE"

	echo ">>> WARNING!  under 128 megabytes of ram detected.  Not enabling APC."

	echo ">>> WARNING!  under 128 megabytes of ram detected.  Not enabling APC." | /usr/bin/logger -p daemon.info -i -t rc.php_ini_setup

fi

	/bin/cat >>/usr/local/lib/php.ini <<EOF

[suhosin]

suhosin.get.max_array_depth = 5000

suhosin.get.max_array_index_length = 256

suhosin.get.max_vars = 5000

suhosin.get.max_value_length = 500000

suhosin.post.max_array_depth = 5000

suhosin.post.max_array_index_length = 256

suhosin.post.max_vars = 5000

suhosin.post.max_value_length = 500000

suhosin.request.max_array_depth = 5000

suhosin.request.max_array_index_length = 256

suhosin.request.max_vars = 5000

suhosin.request.max_value_length = 500000

suhosin.memory_limit = 512435456

EOF

# Copy php.ini file to etc/ too (cli)

/bin/cp /usr/local/lib/php.ini /usr/local/etc/php.ini

# Remove old log file if it exists.

if [ -f /var/run/php_modules_load_errors.txt ]; then

	/bin/rm /var/run/php_modules_load_errors.txt

fi 

for EXT in $PHPMODULES; do

	PHPMODULESLC="$PHPMODULESLC `echo "$EXT" | /usr/bin/tr '[:upper:]' '[:lower:]'`"

done

# Check loaded modules and remove anything that did not load correctly

LOADED_MODULES=`/usr/local/bin/php -m | /usr/bin/tr '[:upper:]' '[:lower:]' 2>/dev/null | /usr/bin/grep -v "\["`

for EXT in $PHPMODULESLC; do

	SHOULDREMOVE="true"

	for LM in $LOADED_MODULES; do

		if [ "$EXT" = "$LM" ]; then

			SHOULDREMOVE="false"

		fi		

	done

	# Handle low memory situations

	if [ "$LOWMEM" = "TRUE" ]; then

		if [ "$EXT" = "apc" ]; then

			SHOULDREMOVE="true"

		fi

		if [ "$EXT" = "xcache" ]; then

			SHOULDREMOVE="true"

		fi

	fi

	if [ "$SHOULDREMOVE" = "true" ]; then

		if [ -f "${EXTENSIONSDIR}${EXT}.so" ]; then

			echo ">>> ${EXT} did not load correctly.  Removing from php.ini..." >> /var/run/php_modules_load_errors.txt

			/bin/cat /usr/local/lib/php.ini | /usr/bin/grep -v $EXT > /tmp/php.ini

			/bin/rm -f /usr/local/lib/php.ini

			/bin/mv /tmp/php.ini /usr/local/lib/php.ini

		fi

	fi

done

# Copy php.ini file to etc/ too (cli)

/bin/cp /usr/local/lib/php.ini /usr/local/etc/php.ini