Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug]: receive appsec warning #3000

Open
Damien-DAGORN opened this issue Dec 17, 2024 · 1 comment
Open

[Bug]: receive appsec warning #3000

Damien-DAGORN opened this issue Dec 17, 2024 · 1 comment
Labels
🐛 bug Something isn't working

Comments

@Damien-DAGORN
Copy link

Bug report

Since 2 days I receive these messages from my php app, I've tried to disable appsec explicitly by set the "DD_APPSEC_ENABLED" env var to false but it doesn't work and we continue to receive the message.

  • NOTICE: PHP message: PHP Warning: Unknown: [ddappsec] Invalid message header from helper in Unknown on line 0
  • NOTICE: PHP message: PHP Warning: Unknown: [ddappsec] Error receiving reply for command config_sync: dd_network in Unknown on line 0

PHP version

8.1.31

Tracer or profiler version

1.5.1

Installed extensions

[PHP Modules]
apcu
bcmath
blackfire
Core
ctype
curl
datadog-profiling
date
ddappsec
ddtrace
dom
fileinfo
filter
ftp
hash
iconv
intl
json
libxml
mbstring
mysqlnd
openssl
pcntl
pcre
PDO
pdo_pgsql
pdo_sqlite
Phar
posix
readline
Reflection
session
SimpleXML
sodium
SPL
sqlite3
standard
tokenizer
xml
xmlreader
xmlwriter
Zend OPcache
zlib

[Zend Modules]
Zend OPcache
blackfire
datadog-profiling
ddappsec
ddtrace

Output of phpinfo()

No response

Upgrading from

No response

@Damien-DAGORN Damien-DAGORN added the 🐛 bug Something isn't working label Dec 17, 2024
@cataphract
Copy link
Contributor

cataphract commented Dec 19, 2024

DD_APPSEC_ENABLED=false should definitely prevent appsec from trying to connect. Check phpinfo() and verify the value of datadog.appsec.enabled. Maybe the environment variable is not being set in the correct context. The fact that appsec is trying to send a config_sync message suggests that DD_APPSEC_ENABLED is in its default state (neither true nor false).

You may also choose not to load the ddappsec.so shared library (remove extension=ddappsec.so from the php configuration).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🐛 bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants