06771: Instructions on "Installation security hints" do not seem to apply to version 2.00+ - LimeSurvey bugs, patches and feature requests

LimeSurvey issue tracker

Registration

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

Project

Category

View Status

Date Submitted

Last Update

06771

Bug reports

[All Projects] Documentation

public

2012-10-24 18:01

2012-11-02 13:09

Reporter

Holzhauer

Assigned To

c_schmitz

Priority

high

Severity

major

Status

closed

Resolution

fixed

Product Version

2.00+

Target Version

Fixed in Version

Summary

06771: Instructions on "Installation security hints" do not seem to apply to version 2.00+

Description

See http://docs.limesurvey.org/Installation+security+hints&structure=English+Instructions+for+LimeSurvey#Other_security_issues [^] regarding "put the certain information from the config.php file in a non-web directory":

There is no $rootdir in config.php (anymore). Following the instructions and setting 'basePath' instead to the 'application'-folder (what dirname(dirname(__FILE__)) seems to do) and doing similar for 'runtimePath' limesurvey does stop somewhere (however I ensured the realconfig.php is found by inserting print-messages). Putting the confing.php directly in the config folder works

Steps To Reproduce

See desciption

I will donate to the project if issue is resolved within 48 hrs

LimeSurvey build number

121024

Browser

Firefox 15.0.1

Database & DB-Version

MySQL 5.5.25

Operating System (Server)

Debian GNU/Linux 6.0.6

Webserver software & version

Apache

PHP Version

5.3.3-7+squeeze3

Attached Files

Relationships

Notes
(21632) Mazi (developer) 2012-10-24 20:19	Carsten, I think we should add a section on how things are different at LS2. Since you know the system architecture far better, can you have a look at http://docs.limesurvey.org/Installation+security+hints&structure=English+Instructions+for+LimeSurvey#Other_security_issues? [^] Thanks!

(21648) c_schmitz (administrator) 2012-10-25 13:37	Updated the documentation.

(21684) Holzhauer (reporter) 2012-10-25 15:58	Unfortunetly, the changed description does not work either. The script stops somewhere. However, without adapting the values for 'basePath' and 'runtimePath' in configreal.php I don't expect it to work, but setting it as described above does not work, too.

(21906) c_schmitz (administrator) 2012-11-02 13:09	Added more details

Issue History
Date Modified	Username	Field	Change
2012-10-24 18:01	Holzhauer	New Issue
2012-10-24 18:01	Holzhauer	Status	new => assigned
2012-10-24 18:01	Holzhauer	Assigned To	=> Mazi
2012-10-24 20:18	Mazi	Assigned To	Mazi => c_schmitz
2012-10-24 20:19	Mazi	Note Added: 21632
2012-10-25 13:37	c_schmitz	Status	assigned => resolved
2012-10-25 13:37	c_schmitz	Resolution	open => fixed
2012-10-25 13:37	c_schmitz	Note Added: 21648
2012-10-25 13:37	c_schmitz	Status	resolved => closed
2012-10-25 15:58	Holzhauer	Note Added: 21684
2012-10-25 15:58	Holzhauer	Status	closed => feedback
2012-10-25 15:58	Holzhauer	Resolution	fixed => reopened
2012-11-02 13:09	c_schmitz	Note Added: 21906
2012-11-02 13:09	c_schmitz	Status	feedback => resolved
2012-11-02 13:09	c_schmitz	Resolution	reopened => fixed
2012-11-02 13:09	c_schmitz	Status	resolved => closed