View Issue Details

IDProjectCategoryView StatusLast Update
06771Bug reports[All Projects] Documentationpublic2012-11-02 13:09
ReporterHolzhauerAssigned Toc_schmitz 
PriorityhighSeveritymajor 
Status closedResolutionfixed 
Product Version2.00+ 
Target VersionFixed in Version 
Summary06771: Instructions on "Installation security hints" do not seem to apply to version 2.00+
DescriptionSee http://docs.limesurvey.org/Installation+security+hints&structure=English+Instructions+for+LimeSurvey#Other_security_issues regarding "put the certain information from the config.php file in a non-web directory":

There is no $rootdir in config.php (anymore). Following the instructions and setting 'basePath' instead to the 'application'-folder (what dirname(dirname(__FILE__)) seems to do) and doing similar for 'runtimePath' limesurvey does stop somewhere (however I ensured the realconfig.php is found by inserting print-messages). Putting the confing.php directly in the config folder works
Steps To ReproduceSee desciption
TagsNo tags attached.
Complete LimeSurvey version number (& build)121024
I will donate to the project if issue is resolvedNo
BrowserFirefox 15.0.1
Database & DB-VersionMySQL 5.5.25
Operating System (Server)Debian GNU/Linux 6.0.6
Webserver software & versionApache
PHP Version5.3.3-7+squeeze3

Activities

Mazi

Mazi

2012-10-24 20:19

developer   ~21632

Carsten, I think we should add a section on how things are different at LS2. Since you know the system architecture far better, can you have a look at http://docs.limesurvey.org/Installation+security+hints&structure=English+Instructions+for+LimeSurvey#Other_security_issues?

Thanks!
c_schmitz

c_schmitz

2012-10-25 13:37

administrator   ~21648

Updated the documentation.
Holzhauer

Holzhauer

2012-10-25 15:58

reporter   ~21684

Unfortunetly, the changed description does not work either. The script stops somewhere. However, without adapting the values for 'basePath' and 'runtimePath' in configreal.php I don't expect it to work, but setting it as described above does not work, too.
c_schmitz

c_schmitz

2012-11-02 13:09

administrator   ~21906

Added more details

Issue History

Date Modified Username Field Change
2012-10-24 18:01 Holzhauer New Issue
2012-10-24 18:01 Holzhauer Status new => assigned
2012-10-24 18:01 Holzhauer Assigned To => Mazi
2012-10-24 20:18 Mazi Assigned To Mazi => c_schmitz
2012-10-24 20:19 Mazi Note Added: 21632
2012-10-25 13:37 c_schmitz Status assigned => resolved
2012-10-25 13:37 c_schmitz Resolution open => fixed
2012-10-25 13:37 c_schmitz Note Added: 21648
2012-10-25 13:37 c_schmitz Status resolved => closed
2012-10-25 15:58 Holzhauer Note Added: 21684
2012-10-25 15:58 Holzhauer Status closed => feedback
2012-10-25 15:58 Holzhauer Resolution fixed => reopened
2012-11-02 13:09 c_schmitz Note Added: 21906
2012-11-02 13:09 c_schmitz Status feedback => resolved
2012-11-02 13:09 c_schmitz Resolution reopened => fixed
2012-11-02 13:09 c_schmitz Status resolved => closed