View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
06771 | Bug reports | Documentation | public | 2012-10-24 18:01 | 2012-11-02 13:09 |
Reporter | Holzhauer | Assigned To | c_schmitz | ||
Priority | high | Severity | partial_block | ||
Status | closed | Resolution | fixed | ||
Product Version | 2.00+ | ||||
Summary | 06771: Instructions on "Installation security hints" do not seem to apply to version 2.00+ | ||||
Description | See http://docs.limesurvey.org/Installation+security+hints&structure=English+Instructions+for+LimeSurvey#Other_security_issues regarding "put the certain information from the config.php file in a non-web directory": There is no $rootdir in config.php (anymore). Following the instructions and setting 'basePath' instead to the 'application'-folder (what dirname(dirname(FILE)) seems to do) and doing similar for 'runtimePath' limesurvey does stop somewhere (however I ensured the realconfig.php is found by inserting print-messages). Putting the confing.php directly in the config folder works | ||||
Steps To Reproduce | See desciption | ||||
Tags | No tags attached. | ||||
Bug heat | 6 | ||||
Complete LimeSurvey version number (& build) | 121024 | ||||
I will donate to the project if issue is resolved | No | ||||
Browser | Firefox 15.0.1 | ||||
Database type & version | MySQL 5.5.25 | ||||
Server OS (if known) | Debian GNU/Linux 6.0.6 | ||||
Webserver software & version (if known) | Apache | ||||
PHP Version | 5.3.3-7+squeeze3 | ||||
Carsten, I think we should add a section on how things are different at LS2. Since you know the system architecture far better, can you have a look at http://docs.limesurvey.org/Installation+security+hints&structure=English+Instructions+for+LimeSurvey#Other_security_issues? Thanks! |
|
Updated the documentation. |
|
Unfortunetly, the changed description does not work either. The script stops somewhere. However, without adapting the values for 'basePath' and 'runtimePath' in configreal.php I don't expect it to work, but setting it as described above does not work, too. |
|
Added more details |
|
Date Modified | Username | Field | Change |
---|---|---|---|
2012-10-24 18:01 | Holzhauer | New Issue | |
2012-10-24 18:01 | Holzhauer | Status | new => assigned |
2012-10-24 18:01 | Holzhauer | Assigned To | => Mazi |
2012-10-24 20:18 | Mazi | Assigned To | Mazi => c_schmitz |
2012-10-24 20:19 | Mazi | Note Added: 21632 | |
2012-10-25 13:37 | c_schmitz | Status | assigned => resolved |
2012-10-25 13:37 | c_schmitz | Resolution | open => fixed |
2012-10-25 13:37 | c_schmitz | Note Added: 21648 | |
2012-10-25 13:37 | c_schmitz | Status | resolved => closed |
2012-10-25 15:58 | Holzhauer | Note Added: 21684 | |
2012-10-25 15:58 | Holzhauer | Status | closed => feedback |
2012-10-25 15:58 | Holzhauer | Resolution | fixed => reopened |
2012-11-02 13:09 | c_schmitz | Note Added: 21906 | |
2012-11-02 13:09 | c_schmitz | Status | feedback => resolved |
2012-11-02 13:09 | c_schmitz | Resolution | reopened => fixed |
2012-11-02 13:09 | c_schmitz | Status | resolved => closed |