PEAK XOOPS - Re: Re: Protector Security Problem? in englishin japanese

Top > Comments >News comment >Re: Protector Security Problem?

Re: Re: Protector Security Problem?

Target News
Subject ProtectorにLFIだそうです（笑）
Summary xoops.org (Mamba) がこんなニュースを出しました。Security : Protector Security Fix for XOOPS 2.0.x and 2.2.x users 先に結論から言うと、無意味なレポートなので、無視して構いません。XOOPS_TRUST_PATH内のファイルにアクセスされたらLFIだ、なんてトンデモなレポ...

List posts in the topic

none Re: Re: Protector Security Problem?

msg# 1.4.1
depth:
2
Previous post - Next post | Parent - No child | Posted on 2008/12/5 3:48
GIJOE  先任軍曹   Posts: 4110
hi nitinshah12

Quote:

As a user of xoops what I would like to know is since my webhost does not allow creating folder outside rootfolder, what according to you should i do to fix this issue.
Just "create"?
If you mean create/read, it might be the open_basedir restriction.

Then you have to make XOOPS_TRUST_PATH inside your "rootfolder" (DocumentRoot) then put .htaccess "DENY FROM ALL".

You can check whether the .htaccess works fine via Protector's "Security Advisory".

Normally, you will get 403 error.
This means OK.
If your host disallows (not ignores) .htaccess, then you will get 500 error (Internal Server Error).
It is OK also.
Votes:12 Average:9.17

Posts tree

  Advanced search

Login
Username or e-mail:

Password:

Remember Me

Lost Password?

Register now!