How to update Apache to 2.4.x

[AlexeyDr]

Greats to you all!

In the beginning of 2017 if have updated my zpanel (running 2012 server std) to 10.1.1 and then used
http://forums.sentora.org/showthread.php?tid=2198 tutorial to update to Sentora 1.0.3

Now i have a problem with security on my server, seems that because of old Apache or myphpadmin.
That problem allows hacker to create user on my server...

Code:

C:\Windows\System32>httpd -v Server version: Apache/2.4.3 (Win32) Server built: Aug 18 2012 12:41:37

When I close Apache port on Windows firewall - problem disappears
Should I update my Apache and PHPmyAdmin? How to localize a problem? How to Update Apache?
Maybe will be better to install http://awserver.ru/ ?
Huge respect for any help...

[Me.B]

When you update to apache 2.4 the vhosts config change and so it will cause issues.

So take care.

M B

[TGates]

AWServer is a good solution but I do not know if he is keeping it updated at this time. I haven't heard from him in a while.
Although, in both versions, some newer modules may break as they are not setup to use ZPanel file and folder paths

The best solution? Switch to either Ubuntu 14.04 or CentOS 7 operating systems.

[AlexeyDr]

AWServer is a good solution but I do not know if he is keeping it updated at this time. I haven't heard from him in a while.
Although, in both versions, some newer modules may break as they are not setup to use ZPanel file and folder paths

The best solution? Switch to either Ubuntu 14.04 or CentOS 7 operating systems.

Dear forumers!  Thank you  for your kind support!

In  my  case  Control  panel  content  isnt  a  problem  to  deal  with. But  i  cant  switch  to  another OS.
What  is  the easiest  way  to  find and  investigate traces of  hacker  activity? Should  i  look  into  Apache  logs?

[TGates]

Yes, apache logs, auth logs, ftp logs.. anything you can find to pin point where your server is compromised. If you can narrow it down to a specific site, then you can check that site's access and error logs for even more information.

[muratkaragoz]

If you want to upgrade Apache from 2.2 to 2.4 , you should check this page: https://httpd.apache.org/docs/2.4/upgrading.html

I have upgraded it to Apache 2.4.4.3 . I have changed  OnDaemonRun.hook.php file in      C:\Sentora\panel\modules\apache_admin\hooks

Code:

2.2 configuration: Order deny,allow Deny from all 2.4 configuration: Require all denied

You should also check .htaccess files for "Order deny,..." modification. 
You had better use Notepad++ . It allows you to search in files quickly.

Apache 2.2 has security vulnerabilities. You can check them at https://www.cvedetails.com/vulnerability...r-2.2.html

[andykimpe]

yes this version is latest compatibility binary for php5

https://www.apachelounge.com/download/VC11/

just stop service apache

backup httpd.conf and php.ini

php latest php 5.6.40

https://windows.php.net/downloads/releas...11-x86.zip

https://windows.php.net/downloads/releas...11-x64.zip

suhosin 0.9.38 for php 5.6

32 bit

https://github.com/andykimpe/suhosin-win...uhosin.dll

64 bit

https://github.com/andykimpe/suhosin-win...uhosin.dll

if you want the latest version of apache

2.4.43 it will have to be recompiled here is a batch which does it almost automatically

Code:

@echo off rem check admin or force enable admin mode echo "admin" > C:\Windows\System32\admin IF EXIST "C:\Windows\System32\admin" (GOTO gotAdmin) ELSE (GOTO UACPrompt) :UACPrompt echo "no admin"    echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"    set params = %*:"="    echo UAC.ShellExecute "cmd.exe", "/c %~s0 %params%", "", "runas", 1 >> "%temp%\getadmin.vbs"    "%temp%\getadmin.vbs"    del "%temp%\getadmin.vbs" exit :gotAdmin echo "admin" > C:\Windows\System32\admin del C:\Windows\System32\admin echo "admin2" > C:\Windows\System32\admin2 IF EXIST "C:\Windows\System32\admin2" (GOTO endAdmin) ELSE (GOTO UACPrompt) :endAdmin del C:\Windows\System32\admin2 rem start script rem check cygwin installed or install IF EXIST "C:\cygwin\bin\wget.exe" (GOTO ENDCYGWIN) IF EXIST "C:\setup-x86.exe" (GOTO INSTALLCYGWIN) ELSE (GOTO CYGWIN) :CYGWIN echo "please download cygwin 32bit version" echo "and place file setup-x86.exe in C:\" pause IF EXIST "C:\setup-x86.exe" (GOTO INSTALLCYGWIN) ELSE (GOTO CYGWIN) :INSTALLCYGWIN C:\setup-x86.exe --arch x86 --root C:\Cygwin --quiet-mode --packages wget,unzip,zip --site http://cygwin.mirrors.pair.com :ENDCYGWIN SET OLDPATH=%PATH% SET PATH=%PATH%;C:\Cygwin\bin rem download and install visual studio 2012 (VC11) wget https://download.microsoft.com/download/D/E/8/DE8E42D8-7598-4F4E-93D4-BB011094E2F9/VS2012_PRO_enu.iso -O C:\VS2012_PRO_enu.iso rem wget http://download.microsoft.com/download/9/B/8/9B8A9C12-66E2-42CF-9E67-F94A3E872020/VS2012_WDX_FRA.iso -O C:\VS2012_WDX_FRA.iso PowerShell Mount-DiskImage C:\VS2012_PRO_enu.iso rem PowerShell Mount-DiskImage C:\VS2012_WDX_FRA.iso IF EXIST "D:\vs_professional.exe" (GOTO VCDFINAL) ELSE (GOTO VCE) rem IF EXIST "D:\wdexpress_full.exe" (GOTO VCDFINAL) ELSE (GOTO VCE) :VCDFINAL D:\vs_professional.exe /q /norestart timeout /t 250 > null rem D:\wdexpress_full.exe /q /norestart GOTO VCEND :VCE IF EXIST "E:\vs_professional.exe" (GOTO VCEFINAL) ELSE (GOTO VCF) rem IF EXIST "E:\wdexpress_full.exe" (GOTO VCEFINAL) ELSE (GOTO VCF) :VCEFINAL E:\vs_professional.exe /q /norestart timeout /t 250 > null rem E:\wdexpress_full.exe /q /norestart GOTO VCEND :VCF IF EXIST "F:\vs_professional.exe" (GOTO VCFFINAL) ELSE (GOTO VCG) rem IF EXIST "F:\wdexpress_full.exe" (GOTO VCFFINAL) ELSE (GOTO VCG) :VCFFINAL F:\vs_professional.exe /q /norestart timeout /t 250 > null rem F:\wdexpress_full.exe /q /norestart GOTO VCEND :VCG IF EXIST "G:\vs_professional.exe" (GOTO VCGFINAL) ELSE (GOTO VHG) rem IF EXIST "G:\wdexpress_full.exe" (GOTO VCGFINAL) ELSE (GOTO VHG) :VCGFINAL G:\vs_professional.exe /q /norestart timeout /t 250 > null rem G:\wdexpress_full.exe /q /norestart GOTO VCEND :VHG H:\vs_professional.exe /q /norestart timeout /t 250 > null rem H:\wdexpress_full.exe /q /norestart :VCEND PowerShell Dismount-DiskImage C:\VS2012_PRO_enu.iso rem PowerShell Dismount-DiskImage C:\VS2012_WDX_FRA.iso del C:\VS2012_WDX_FRA.iso rem variable 32 or 64 bit :64BIT SET VC="C:\Program Files (x86)\Microsoft Visual Studio 11.0\VC\vcvarsall.bat" SET WINARCH=64 SET ARCH=x64 GOTO NEXT64 :32BIT SET VC="C:\Program Files\Microsoft Visual Studio 11.0\VC\vcvarsall.bat" SET WINARCH=32 SET ARCH=x86 :NEXT64 rem install nasm cd C:\ wget https://www.nasm.us/pub/nasm/releasebuilds/2.15.01/win%WINARCH%/nasm-2.15.01-win%WINARCH%.zip unzip nasm-2.15.01-win%WINARCH%.zip del nasm-2.15.01-win%WINARCH%.zip SET PATH=%PATH%;C:\nasm-2.15.01 rem install perl (strawberry-perl) wget http://strawberryperl.com/download/5.30.2.1/strawberry-perl-5.30.2.1-%WINARCH%bit.msi msiexec /i C:\strawberry-perl-5.30.2.1-%WINARCH%bit.msi /q /norestart timeout /t 20 > null del C:\strawberry-perl-5.30.2.1-%WINARCH%bit.msi SET PATH=%PATH%;C:\Strawberry\perl\bin rem install cmake wget https://github.com/Kitware/CMake/releases/download/v3.18.0-rc2/cmake-3.18.0-rc2-win%WINARCH%-%ARCH%.msi msiexec /i C:\cmake-3.18.0-rc2-win%WINARCH%-%ARCH%.msi /q /norestart timeout /t 30 > null del C:\cmake-3.18.0-rc2-win%WINARCH%-%ARCH%.msi SET PATH=%PATH%;C:\Program Files\CMake\bin IF EXIST "%PROGRAMFILES(X86)%" (GOTO END64) ELSE (GOTO END) :END64 call %VC% amd64 mkdir C:\Development mkdir C:\Development\Apache24\ mkdir C:\Development\Apache24\src mkdir C:\Development\Apache24\build\pcre mkdir C:\Development\Apache24\build\apr mkdir C:\Development\Apache24\build\apr-util mkdir C:\Development\Apache24\build\httpd mkdir C:\Development\Apache24\build\expat cd C:\Development\Apache24\src wget http://ftp.pcre.org/pub/pcre/pcre-8.44.zip unzip C:\Development\Apache24\src\pcre-8.44.zip cd C:\Development\Apache24\build\pcre cmake -G "NMake Makefiles" -DCMAKE_INSTALL_PREFIX=C:\Apache24 -DCMAKE_BUILD_TYPE=RelWithDebInfo -DBUILD_SHARED_LIBS=ON -DPCRE_BUILD_TESTS=OFF -DPCRE_BUILD_PCRECPP=OFF -DPCRE_BUILD_PCREGREP=OFF -DPCRE_SUPPORT_PCREGREP_JIT=OFF -DPCRE_SUPPORT_UTF=ON -DPCRE_SUPPORT_UNICODE_PROPERTIES=ON -DPCRE_NEWLINE=CRLF -DINSTALL_MSVC_PDB=OFF ..\..\src\pcre-8.44 nmake nmake install cd C:\Development\Apache24\src wget --no-check-certificate https://www.openssl.org/source/openssl-1.1.1g.tar.gz gzip -d openssl-1.1.1g.tar.gz tar -xvf openssl-1.1.1g.tar cd C:\Development\Apache24\src\openssl-1.1.1g perl Configure VC-WIN64A --prefix=C:\Apache24 --openssldir=C:\Apache24\conf enable-camellia no-idea no-mdc2 no-ssl2 no-ssl3 no-zlib nmake nmake install cd C:\Development\Apache24\src wget --no-check-certificate https://apache.mirrors.benatherton.com/apr/apr-1.7.0-win32-src.zip unzip apr-1.7.0-win32-src.zip cd C:\Development\Apache24\build\apr cmake -G "NMake Makefiles" -DCMAKE_INSTALL_PREFIX=C:\Apache24 -DCMAKE_BUILD_TYPE=RelWithDebInfo -DMIN_WINDOWS_VER=0x0600 -DAPR_HAVE_IPV6=ON -DAPR_INSTALL_PRIVATE_H=ON -DAPR_BUILD_TESTAPR=OFF -DINSTALL_PDB=OFF ..\..\src\apr-1.7.0 nmake nmake install cd C:\Development\Apache24\src C:\wget\bin\wget.exe --no-check-certificate http://github.com/libexpat/libexpat/releases/download/R_2_2_9/expat-2.2.9.tar.gz gzip -d expat-2.2.9.tar.gz tar -xvf expat-2.2.9.tar cd C:\Development\Apache24\build\expat cmake -G "NMake Makefiles" -DCMAKE_INSTALL_PREFIX=C:\Apache24 -DOPENSSL_ROOT_DIR=C:\Apache24 -DCMAKE_BUILD_TYPE=RelWithDebInfo -DAPU_HAVE_CRYPTO=ON -DAPR_BUILD_TESTAPR=OFF -DINSTALL_PDB=OFF ..\..\src\expat-2.2.9 nmake nmake install cd C:\Development\Apache24\src wget --no-check-certificate https://apache.mirrors.benatherton.com//apr/apr-util-1.6.1-win32-src.zip unzip apr-util-1.6.1-win32-src.zip cd C:\Development\Apache24\build\apr-util cmake -G "NMake Makefiles" -DCMAKE_INSTALL_PREFIX=C:\Apache24 -DOPENSSL_ROOT_DIR=C:\Apache24 -DCMAKE_BUILD_TYPE=RelWithDebInfo -DAPU_HAVE_CRYPTO=ON -DAPR_BUILD_TESTAPR=OFF -DINSTALL_PDB=OFF ..\..\src\apr-util-1.6.1 nmake nmake install cd C:\Development\Apache24\src wget --no-check-certificate http://us.mirrors.quenda.co/apache//httpd/httpd-2.4.43.tar.gz gzip -d httpd-2.4.43.tar.gz tar -xvf httpd-2.4.43.tar cd C:\Development\Apache24\build\httpd cd C:\Development\Apache24\build\httpd cmake -G "NMake Makefiles" -DCMAKE_INSTALL_PREFIX=C:\Apache24 -DCMAKE_BUILD_TYPE=RelWithDebInfo -DENABLE_MODULES=i -DINSTALL_PDB=OFF ..\..\src\httpd-2.4.43 nmake nmake install :END call %VC% x86 mkdir C:\Development mkdir C:\Development\Apache24\ mkdir C:\Development\Apache24\src mkdir C:\Development\Apache24\build\pcre mkdir C:\Development\Apache24\build\apr mkdir C:\Development\Apache24\build\apr-util mkdir C:\Development\Apache24\build\httpd mkdir C:\Development\Apache24\build\expat cd C:\Development\Apache24\src wget http://ftp.pcre.org/pub/pcre/pcre-8.44.zip unzip C:\Development\Apache24\src\pcre-8.44.zip cd C:\Development\Apache24\build\pcre cmake -G "NMake Makefiles" -DCMAKE_INSTALL_PREFIX=C:\Apache24 -DCMAKE_BUILD_TYPE=RelWithDebInfo -DBUILD_SHARED_LIBS=ON -DPCRE_BUILD_TESTS=OFF -DPCRE_BUILD_PCRECPP=OFF -DPCRE_BUILD_PCREGREP=OFF -DPCRE_SUPPORT_PCREGREP_JIT=OFF -DPCRE_SUPPORT_UTF=ON -DPCRE_SUPPORT_UNICODE_PROPERTIES=ON -DPCRE_NEWLINE=CRLF -DINSTALL_MSVC_PDB=OFF ..\..\src\pcre-8.44 nmake nmake install cd C:\Development\Apache24\src wget --no-check-certificate https://www.openssl.org/source/openssl-1.1.1g.tar.gz gzip -d openssl-1.1.1g.tar.gz tar -xvf openssl-1.1.1g.tar cd C:\Development\Apache24\src\openssl-1.1.1g perl Configure VC-WIN32 --prefix=C:\Apache24 --openssldir=C:\Apache24\conf enable-camellia no-idea no-mdc2 no-ssl2 no-ssl3 no-zlib nmake nmake install cd C:\Development\Apache24\src wget --no-check-certificate https://apache.mirrors.benatherton.com/apr/apr-1.7.0-win32-src.zip unzip apr-1.7.0-win32-src.zip cd C:\Development\Apache24\build\apr cmake -G "NMake Makefiles" -DCMAKE_INSTALL_PREFIX=C:\Apache24 -DCMAKE_BUILD_TYPE=RelWithDebInfo -DMIN_WINDOWS_VER=0x0600 -DAPR_HAVE_IPV6=ON -DAPR_INSTALL_PRIVATE_H=ON -DAPR_BUILD_TESTAPR=OFF -DINSTALL_PDB=OFF ..\..\src\apr-1.7.0 nmake nmake install cd C:\Development\Apache24\src C:\wget\bin\wget.exe --no-check-certificate http://github.com/libexpat/libexpat/releases/download/R_2_2_9/expat-2.2.9.tar.gz gzip -d expat-2.2.9.tar.gz tar -xvf expat-2.2.9.tar cd C:\Development\Apache24\build\expat cmake -G "NMake Makefiles" -DCMAKE_INSTALL_PREFIX=C:\Apache24 -DOPENSSL_ROOT_DIR=C:\Apache24 -DCMAKE_BUILD_TYPE=RelWithDebInfo -DAPU_HAVE_CRYPTO=ON -DAPR_BUILD_TESTAPR=OFF -DINSTALL_PDB=OFF ..\..\src\expat-2.2.9 nmake nmake install cd C:\Development\Apache24\src wget --no-check-certificate https://apache.mirrors.benatherton.com//apr/apr-util-1.6.1-win32-src.zip unzip apr-util-1.6.1-win32-src.zip cd C:\Development\Apache24\build\apr-util cmake -G "NMake Makefiles" -DCMAKE_INSTALL_PREFIX=C:\Apache24 -DOPENSSL_ROOT_DIR=C:\Apache24 -DCMAKE_BUILD_TYPE=RelWithDebInfo -DAPU_HAVE_CRYPTO=ON -DAPR_BUILD_TESTAPR=OFF -DINSTALL_PDB=OFF ..\..\src\apr-util-1.6.1 nmake nmake install cd C:\Development\Apache24\src wget --no-check-certificate http://us.mirrors.quenda.co/apache//httpd/httpd-2.4.43.tar.gz gzip -d httpd-2.4.43.tar.gz tar -xvf httpd-2.4.43.tar cd C:\Development\Apache24\build\httpd cd C:\Development\Apache24\build\httpd cmake -G "NMake Makefiles" -DCMAKE_INSTALL_PREFIX=C:\Apache24 -DCMAKE_BUILD_TYPE=RelWithDebInfo -DENABLE_MODULES=i -DINSTALL_PDB=OFF ..\..\src\httpd-2.4.43 nmake nmake install cd C:\ zip -r httpd-2.4.43-win32-VC11.zip Apache24 rmdir /S /Q C:\Apache24 rmdir /S /Q C:\Development rmdir /S /Q C:\nasm-2.15.01 SET PATH=%OLDPATH%