1Panel-dev / 1Panel-dev/1Panel

[Bug] The PHP runtime environment supports one container per website.

Open
#11,557 2 comments 0 reactions 2 assignees View on GitHub

@zhengkunwang223 is already working on this.

Since Mar 20, 2026.

type: optimization
Dominant language
Go
Stars
37k
Forks
3.4k
Avg merge
9h 16m
Merged PRs (30d)
105

Description

Contact Information

No response

1Panel Version

v2.0.16

Problem Description

我对每个站点单独创建了一个运行环境,在docker容器中使用ls发现这个PHP运行环境把所有站点都授权进去了,如果我其中一个站点被入侵,其它站点也会遭受影响,这不符合咱们官网宣传的【基于容器管理和部署应用,有效降低漏洞暴露面】
Image

建议:建议在【网站】中对每个PHP网站设置【PHP】环境绑定时,只要选择这个PHP环境,才将对应的站点授权进这个PHP运行环境容器中,未选择这个PHP运行环境,在这个运行环境中不进行挂载,这样更有效的降低漏洞暴露面,如果一个站点被黑,其它站点受到的影响也会减少很多。
Image

Steps to Reproduce

这里的全局变量挂载的模式建议改成动态绑定和动态解绑站点,根据【网站】中对应使用PHP运行环境的站点进行自动的绑定,如果【网站】中对应站点更换了运行环境则自动动态解绑,然后绑定新的运行环境,而不是直接/opt/1panel/www这个目录直接挂载进去
Image

The expected correct result

No response

Related log output

Additional Information

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.