PEAK XOOPS - Re: Re: Protector Security Problem? in englishin japanese

Top > Comments >News comment >Re: Protector Security Problem?

Re: Re: Protector Security Problem?

Target News
Subject Protector Security Problem?
Summary xoops.org (Mamba) annouces a news.Security : Protector Security Fix for XOOPS 2.0.x and 2.2.x users I can say it is a non-sense report then just ignore it.(Inside XOOPS_TRUST_PATH LFI )There are many Web applications structured with both public codes (...

List posts in the topic

none Re: Re: Protector Security Problem?

msg# 1.5
depth:
1
Previous post - Next post | Parent - No child | Posted on 2008/12/5 19:53
nitinshah12  Corporal   Posts: 48
Quote:
hi nitinshah12

Quote:


As a user of xoops what I would like to know is since my webhost does not allow creating folder outside rootfolder, what according to you should i do to fix this issue.

Just "create"?
If you mean create/read, it might be the open_basedir restriction.

Then you have to make XOOPS_TRUST_PATH inside your "rootfolder" (DocumentRoot) then put .htaccess "DENY FROM ALL".

You can check whether the .htaccess works fine via Protector's "Security Advisory".

Normally, you will get 403 error.
This means OK.
If your host disallows (not ignores) .htaccess, then you will get 500 error (Internal Server Error).
It is OK also.

Thanks a lot
Votes:8 Average:8.75

Posts tree

  Advanced search

Login
Username or e-mail:

Password:

Remember Me

Lost Password?

Register now!