|
|
LimeSurvey creates all files as webserver user (because the script itself is run by the webserver) so how would the webserver not be able to see it unless it is configured incorrectly. And if the script itself that created the file can set the file permission anway afterwards what good is the umask then?
The only way would be to chmod files after creation but which mask would be applied here? There is no general permission scheme you can use here.
Anyway, this sounds more like a feature request than a bug issue.
You should rather consider it to submit this to http://ideas.limesurvey.org , instead. |
|
|
My long and detailed reply has just been just lost, as I spent too much time writing it :(
In brief:
- the user which runs the PHP interpreter could be another user then the one which runs a web server (that is not a case when you are using Apache with mod_php, but mod_php and Apache are not the only way of running PHP :) ); I could describe this topic deeply if you are interested, but I think it is unnecessary here and now;
- you are right that there is no permission schema which will satisfy all possible platforms;
- I think that the simpliest and quite elegant solution will be accessing template previews by not directly, but through a simple php script wich will just read a template preview file and send it to the browser. It would work in a way that:
- in the IFRAME displaing template preview the SRC property will be "pathToScript?file=template_temp_XXX.html" instead of "/tmp/template_temp_XXX.html" (this requires small change in "application/views/admin/templates/templatesummary_view.php", line 119);
- script source will be just like:
<?php
importLocationOfLimeTmpDirectory(if it is stored in a configuration variable)
if(!isset($_GET['file'])) return; // or display an error message
//<-- make sure nobody is trying to use our script to get file another than template preview
$file=array();
preg_match('/^[_a-zA-Z0-9]+[.]html$/', $_GET['file'], $file);
if(count($file)==0) return;
$file=$PathToLimeTmpDir.$file[0];
//-->
if(!file_exists($file)) return; // or display an error message
readfile($file);
?>
- on mod_php platforms there will be no difference, and on the platforms where PHP is running as sudoed CGI problems with files permisions will gone;
- I could easily prepare a patch described above, the only help I need form you is to tell me where such wrapper script should be placed to be in harmony with Limesruvey file structure?
|
