6 results found

1. PHP GD webp support

   The version of GD provided with Plesk PHP packages does not have support for webp enabled by default. Almost all browsers now support this format.
   https://developers.google.com/speed/webp/

   324 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   152 comments  ·  Web / PHP  ·  Delete…  ·  Admin →
   completed  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

   Supported since Plesk 18.0.27 version https://docs.plesk.com/release-notes/obsidian/change-log/#plesk-18027
   —
   IG

2. Compile PHP 7.2 with Argon2

   Argon2 is a new feature of PHP 7.2 as stated here: http://php.net/releases/7_2_0.php. It won the password hashing competition and is the recommended hashing algorithm.

   It must be enabled my re-compiling PHP 7.2 with --with-password-argon2.

   132 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   48 comments  ·  Web / PHP  ·  Delete…  ·  Admin →
   completed  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

   PHP shipped with Plesk supports Argon2 since Plesk 18.0.28 version – https://docs.plesk.com/release-notes/obsidian/change-log/#plesk-18028
   —
   IG

3. Add SSH2 extension to PHP default extensions to improve security

   Hi,

   Please consider add SSH2 extension to PHP default available extensions.

   To be able to use FTP over SSH (SFTP) the SSH2 extension must be installed on PHP.

   IN SHORT: SFTP (SSH2 EXTENSION) = SECURITY

   SFTP means secure file transfer via Secure Shell (or SSH), hence the name SSH File Transfer Protocol (SFTP). The two devices (server and client) communicate via a single channel, that of SSH, in which the remote file management commands are sent and where the file transfer takes place. By default, the only port required for SFTP is 22, the same as SSH.

   SFTP implements the same specifications at the cryptographic level supported by SSH, also TLS 1.3.

   WHAT ARE FTP AND SFTP:

   FTP is the traditional file transfer protocol. It’s a basic way of using the Internet to share files. SFTP (or Secure File Transfer Protocol) is an alternative to FTP that also allows you to transfer files, but adds a layer of security to the process. SFTP uses SSH (or secure shell) encryption to protect data as it’s being transferred. This means data is not exposed to outside entities on the Internet when it is sent to another party.

   Businesses often choose SFTP solutions due to enhanced security. However, many others still rely on FTP to facilitate data transfers. To better understand which file sharing option can meet your company’s needs, let’s look at the differences between SFTP vs. FTP. Understanding how these file transfer options differ will help you choose which option is best to transfer your data. There are three key areas in which SFTP vs. FTP differ: encryption, firewalls, and potential vulnerabilities.

   ENCRYPTION:

   Transferring data is a vital, day-to-day task for many businesses. While some data transfers may not require protection, other files may house sensitive information – information that is too sensitive to fall into the wrong hands. This is why encrypting your data is essential. Encryption scrambles data, making it decipherable only by the sender and the recipient, ensuring that even if a file is intercepted, it won’t be intelligible to any unintended parties.

   So, how does encryption impact your choice between SFTP vs. FTP? The traditional file transfer protocol (FTP) is a simple way of transferring data, but it offers nothing in terms of data protection. Files are transferred without encryption, making data readable for anyone who intercepts it. While this is fine if you’re just sending unimportant files, this could lead to major data compromises if you’re sending crucial data.

   SFTP, in contrast, offers a secure shell protecting files. Because files are encrypted, you don’t have to worry about data falling into the wrong hands. This is the ideal mode of transfer for any file that you want to protect. SFTP uses an encrypted type of fingerprint technology to first verify host keys before any data transfer has taken place.

   In terms of compliance, encryption makes a huge difference. If your organization is subject to compliance standards (including, but not limited to, the ones listed below), you could face serious consequences if you fail to encrypt data:

   HIPAA
   ITAR
   PCI-DSS
   SOX
   GLBA

   Encryption isn’t just a feature offered by SFTP that’s nice to have. It’s an essential step you should take to protect your data. If you fail to comply with these standards, your business could be subject to some serious fines.

   FIREWALLS:

   Another way in which FTP and SFTP differ is how channels are used. When you send files via FTP, this protocol needs to open multiple channels in order to complete the transfer. While the client and software negotiate these channels automatically, the client-side firewalls need to open multiple ports. Opening multiple channels can also open the client’s firewalls to vulnerability.

   SFTP presents a more secure process for the client-side firewall. Only port 22 will need to be open to send and receive data. This simplifies firewall configurations and is a better choice in terms of file sharing security.

   VULNERABILITIES:

   In addition to encryption and firewalls, SFTP beats FTP in terms of potential vulnerabilities, too. Any vulnerability can potentially be exploited and turned into a data breach. When it comes to inherent vulnerabilities in the file transfer process, FTP has a number of prominent ones.

   The first vulnerability is that FTP is prone to human error. Sending a file to the wrong recipient or sending the wrong file altogether can lead to some serious problems for your company. With a greater level of security provided by SFTP, you can minimize the potential for human error. You can also take steps to promote a culture of security awareness within your business to reduce the potential for human error.

   Intercepting data is simple with FTP, too. All it takes is the right tools and a little bit of knowledge to take advantage of these vulnerabilities. Even the most amateur hackers can intercept an FTP transfer. Sensitive data is often worth too much to risk a breach.

   Again, host keys can present vulnerabilities. Unlike SFTP which uses host keys to verify a recipient's identity before a transfer takes place, FTP does not. This is yet another way FTP transfers are less secure. All it takes is one accidental transfer to a wrong recipient for a file to be compromised.

   When it comes to secure data transfers, SFTP is your best option. You can feel confident that encryption measures are up to compliance standards, and you’re avoiding the inherent vulnerabilities of FTP transfers.

   Thanks to ftptoday(dot)com for this documents:
   - What are FTP and SFTP;
   - Encryption;
   - Firewalls;
   - Vulnerabilities.

   Thanks in advance for the support.

   Hi,

   Please consider add SSH2 extension to PHP default available extensions.

   To be able to use FTP over SSH (SFTP) the SSH2 extension must be installed on PHP.

   IN SHORT: SFTP (SSH2 EXTENSION) = SECURITY

   SFTP means secure file transfer via Secure Shell (or SSH), hence the name SSH File Transfer Protocol (SFTP). The two devices (server and client) communicate via a single channel, that of SSH, in which the remote file management commands are sent and where the file transfer takes place. By default, the only port required for SFTP is 22, the same as SSH.

   SFTP implements the… more

   33 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  Web / PHP  ·  Delete…  ·  Admin →
   completed  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

   Since Plesk Obsidian 18.0.49 that was published December 20th, 2022, the Plesk PHP configuration page in "Tools & Settings" has a new option where you can easily install PHP PECL packages. The SSH2 extension is a PECL package as described in https://pecl.php.net/package/ssh2. It can be installed right out of the Plesk user surface using the new PECL installer.

   -- PD

4. PHP Extensions Installer

   I would love to see PHP Extensions Installer like other panels cPanel and DirectAdmin have it. Can we see a feature where we install needed PHP Extensions from Plesk rather than SSH into server and install?

   15 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Web / PHP  ·  Delete…  ·  Admin →
   completed  ·  AdminPeter Debik (Community Manager, Plesk International GmbH) responded

   Great news! This feature became available in Plesk 18.0.49! 

   
   

   Plesk added the ability to install extensions for PHP 7.3 and later handlers using PECL. You can manage PHP extensions in Tools & Settings > PHP Settings > choose the desired handler > Manage PECL Packages.

5. manage PHP-FPM max_children

   It is currently quite painful to set and KEEP php-fpm maxchildren to a desired value.
   At the moment the default value of 5 is not available in the management interface and it seems to be reset back to 5 when a change is made in the subscription. Then we get errors about maxchildren reached and we have to manually update it once more.
   See here: https://talk.plesk.com/threads/php-fpm-max-children.336889/

   I suggest adding a default value that is used when creating a new subscription and the ability to modify it in the subscription php settings.

   5 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Web / PHP  ·  Delete…  ·  Admin →
   completed  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

   We’re happy to announce that PHP-FPM setting max_children can be customized in Plesk Onyx 17.5.3 Update 32.

   If you have any feedback on the implementation of this feature, please let us know on the forum: https://talk.plesk.com/forums/plesk-onyx.744/

   We’re closing this request since managing PHP-FPM max_children is available.

   — AY

6. Add PHP 8

   Please add PHP 8 to the plesk infrastructure

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Web / PHP  ·  Delete…  ·  Admin →
   completed  ·  IgorG responded

   Already supported in Plesk 18.0.32 – https://docs.plesk.com/release-notes/obsidian/change-log/#plesk-18032
   —
   IG