phpgroupware-users
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [phpGroupWare-users] "Files Directory must be outside of webservers


From: Dave Hall
Subject: Re: [phpGroupWare-users] "Files Directory must be outside of webservers document root" - but it is!
Date: Wed, 09 Apr 2008 16:55:12 +1000

On Tue, 2008-04-08 at 22:37 +0200, Dirk H. Schulz wrote:
> Hi Folks,
> 
> I am setting up phpgroupware on MacOS X 10.4.11 with PHP5 and MySQL5 - so 
> far no problem, everything works fine. Current phpgroupware with fixes from 
> cvs, of course.
> 
> Only the files/groups directory seems to be a problem. My webserver's 
> document root is /Library/Webserver/Documents (that is MacOS X Standard), 
> and I have created and configured /CustomerFiles to be the files and groups 
> directory (which is clearly outside of document root).
> 
> phpgroupware keeps erroring "Path to files and groups directories must be 
> outside of webserver document root" - I do not find out why. I have tried 
> configuring the phpgroupware URL relative (/phpgroupware) and absolute 
> (http://server.domain.tld/phpgroupware), that did not make any difference.
> 
> Any hint or help is appreciated.

This has been a problem on OSX for some time.  Unfortunately I don't
have access to an OSX box.  

How urgent is this?  I will be in your timezone next week, with some
spare time in the evenings I hope.  If you can give me access, I would
love the opportunity to debug it.  In the mean time, there is a hack
around for it (not this is a potential security issue and not at all
supported by the project </disclaimer>)

In the following files
setup/config.php line 38
phpgwapi/inc/class.vfs_sql.inc.php line 86
infolog/inc/class.vfs.inc.php line 156

change
<code>
function in_docroot($path)
{
        $docroots = array(PHPGW_SERVER_ROOT,$_SERVER['DOCUMENT_ROOT']);
</code>

to

<code>
function in_docroot($path)
{
        return false;
        $docroots = array(PHPGW_SERVER_ROOT,$_SERVER['DOCUMENT_ROOT']);
</code>

Please email me off list if I can get access to the box.

Cheers

Dave





reply via email to

[Prev in Thread] Current Thread [Next in Thread]