Diasabled Security features are affecting Website operations (inconsistently)

[eleboeuf]

I am writing to this forum because it is read by senior staff of Eukhost (this shows commitment !!!), and because I did not succeed to get this problem corrected through Customer Service.

On my website (www. douce-france.co.uk), I am running Joomla and have purchased the AjaxRecommend module + SEF advance. These have been installed and running for months, however recently the following error message appeared:

Warning: php_uname() has been disabled for security reasons in /home/____(hidden)____ /public_html/modules/mod_ajaxrecommend.php on line 7

Site error: the file /home/____(hidden)___/public_html/modules/mod_ajaxrecommend.php requires the ionCube PHP Loader ioncube_loader__4.4.so to be installed by the website administrator.

I reported this issue to Customer Service and was told that the feature had been disabled by eukhost for security reasons and there was nothing that they could do for me. If this is the case, I would like to know why these 2 components are working perfectly on my other website (www. let-it-direct.com), hosted on a different eukhost server. If this is such an important security requirement, why aren't all your servers configured in a consistent manner and offering consistent behaviour?? This is extremely confusing, because there is no way to guarantee that 2 websites hosted by the same company will operate consistently, and purchasing Joomla extension has become a sort of lottery.

In order to keep douce-france.co.uk operation, I had to uninstall SEF-Advance and unpublish Ajax-recommend, however I paid for these 2 components and there is no reason why I should be able to use them on one website and not on the other. I need your help on this, this is sort of inconsistent behaviour in not bringing confidence.

I look forward to hear from you. Eric

[eUKhost.com]

Please provide me with exact URL on douce-france.co.uk where you get this error message. Ioncube has been installed on your server as it was missing but let me know where you get the php_uname message.

php_uname is not enabled on any of our servers as you don't need to know what kernel version your server has and if your application wants to know the kernel version then its better to remove that particular code from the application.

[eleboeuf]

I think you fixed it !!!
I reactivated the recommend module and it works perfect (module is on the top right)
www. douce-france.co.uk/index.php?option=com_eventlist&Itemid=33

I will reinstall SEF advance tomorrow (which I had to uninstall completely) and verify that the problem is fixed for good.

Regards. Eric

[eUKhost.com]

Thats good to hear

php functions like php_uname and shell_exec are not at all needed by any applications but if your application wants to know it then remove that particular code. This 2 functions are main tools of hackers and those who do injections in websites.