Questions about TOS

[mrgreencom]

When using PHP include functions for including a local file, include the local file rather than the URL. Instead of include("http://yourdomain.com/include.php") use include("include.php")

Can you elaborate on this restriction? Is the following method of include allowed?

include("{$_SERVER['DOCUMENT_ROOT']}/includes/include.php")

Third party monitoring service reports may not be used for justification due to a variety of factors including the monitor's network capacity/transit availability. The uptime of the server is defined as the reported uptime from the operating system of the server which may differ from the uptime reported by individual services.

What form of justification is allowed?

Thank you for your time! I look forward to using your services in the future.

[slapshotw]

Originally Posted by mrgreencom

What form of justification is allowed?

From when you open a ticket, to when the ticket is resolved. Or if you're on a shared server and really push, it may be from when they first got a ticket about your server with that issue.

-Matt

[PsiPro]

Your include is OK. DOCUMENT_ROOT shuold return /home/username/bla/bla/bla however for security you should define your own doucment root such as

define('DOC_ROOT', '/home/username/asdlfk/');

then use

include(DOC_ROOT . "/includes/include.php")

For the downtime, its based on the uptime reported by apache.

[mrgreencom]

Originally Posted by PsiPro

Your include is OK. DOCUMENT_ROOT shuold return /home/username/bla/bla/bla however for security you should define your own doucment root such as

define('DOC_ROOT', '/home/username/asdlfk/');

then use

include(DOC_ROOT . "/includes/include.php")

For the downtime, its based on the uptime reported by apache.

Thanks!
So, why is the code I use insecure? The reason I use it is to make the document able to run from any server, so to define it would defeat my purpose. Is there a better way?

[PsiPro]

Nothing really insecure about it, but part of making scripts secure is removing anypossible intrusion for a bug or exploit. If at some time there is an exploit that allows peopel to override $_SERVER['DOCUMENT_ROOT'], you could be (as with alot of people out there), in a peck of trouble.

[ghpk]

Originally Posted by PsiPro

For the downtime, its based on the uptime reported by apache.

NOPE, I don't think Apache is the only thing to be considered for uptime/downtime. most host don't calculate on apache alone, they take OS uptime in consideration.

mrgreencom
If you don't like the 99.5% uptime guarantee, which in most cases and reality is much above that you should better be going for a dedicated server, cause you'll be the only person on that.

see ya,
pk

[PsiPro]

Originally Posted by ghpk

NOPE, I don't think Apache is the only thing to be considered for uptime/downtime. most host don't calculate on apache alone, they take OS uptime in consideration.

I think your right, but when people inquire about it they just give the apache uptime stats.

[Serra]

Originally Posted by mrgreencom

Thanks!
So, why is the code I use insecure? The reason I use it is to make the document able to run from any server, so to define it would defeat my purpose. Is there a better way?

It's not so much about security as it is about efficiency. Code that is local is handled differently than code that is from another server. Code runs better if it thinks its all local code. (less lookups and CPU time)

[ghpk]

Originally Posted by PsiPro

I think your right, but when people inquire about it they just give the apache uptime stats.

Psipro,
just to share, i had to kick one of my client from my box, cause even if apache was restarted he started sending mails "iam loosing money" iam in financial trouble with your restart, and blah blah blah, the average apache uptime on my box was 99.80% which was above than my 99% promise, then to my shock that fellow said you restarted apache so many times i need another YEAR FREE and will not pay the renewal fee. this was enough for less than $ a month.

I closed his account on overdue date.

see ya,
pk

[Serra]

Originally Posted by ghpk

Psipro,
just to share, i had to kick one of my client from my box, cause even if apache was restarted he started sending mails "iam loosing money" iam in financial trouble with your restart, and blah blah blah

First, you are offering 99% availability! ROFL.... That is just funny!

Second, I'm fairly sure that customers sign up with the specific goal of trying to get free service out of host. The "iam loosing money" statement always gets me going. They guy is loosing money, yet is on a hosting service with only 99% availability guaranteed!!!