Applicable to:
- Plesk for Linux
- Plesk for Windows
Symptoms
The following message appears when trying to enable Web Deploy, change PHP handler for a service plan or when applying changes in Hosting Settings for a domain:
This setting conflicts with the server-wide security policy.
Cause
Setup of potentially insecure web scripting option is not enabled for a Service Plan.
Resolution
Go to Plesk > Service Plans > [service plan name] > Permission (tab) and enable Setup of potentially insecure web scripting option.
Warning: Enabling this option is not recommended on shared hosting.
Comments
4 comments
Why would changing PHP handler be considered to conflict with the server-wide security policy in all cases?
I can understand a warning if you chose to use mod_php in place of php_fcgi or php-fpm, but I cannot see a reason for the warning when you change from, for example, php_fcgi 5.3 (vendor) to 5.6 php-fpm (Plesk repo).
@Faris,
Hi! The described behavior is under the investigation currently. New info may be added to the article depending on the investigation results.
Was anything found during these 2 years of investigation?
The same warning still exists in Onyx..
Hello @Turgut
This warning is a security one and it's expected behavior.
To avoid this warning, you can enable Setup of potentially insecure web scripting option in the Plesk > Service Plans > [service plan name] > Permission (tab), as is mentioned in the article.
Though on our UserVoice portal there is a suggestion to enable security policy management per subscription instead of server-wide. If this suggestion seems important to you, you can vote for it:
https://plesk.uservoice.com/forums/184549-feature-suggestions/suggestions/34477117-security-policy-per-subscription
Top-ranked suggestions are likely to be implemented in future versions of Plesk.
Please sign in to leave a comment.