View Issue Details

Jump to NotesJump to History
This issue affects 1 person(s).
 6
IDProjectCategoryView StatusDate SubmittedLast Update
06771Bug reportsDocumentationpublic2012-10-24 18:012012-11-02 13:09
ReporterHolzhauer Assigned Toc_schmitz  
PriorityhighSeveritypartial_block 
Status closedResolutionfixed 
Product Version2.00+ 
Summary06771: Instructions on "Installation security hints" do not seem to apply to version 2.00+
Description

See http://docs.limesurvey.org/Installation+security+hints&structure=English+Instructions+for+LimeSurvey#Other_security_issues regarding "put the certain information from the config.php file in a non-web directory":

There is no $rootdir in config.php (anymore). Following the instructions and setting 'basePath' instead to the 'application'-folder (what dirname(dirname(FILE)) seems to do) and doing similar for 'runtimePath' limesurvey does stop somewhere (however I ensured the realconfig.php is found by inserting print-messages). Putting the confing.php directly in the config folder works

Steps To Reproduce

See desciption

TagsNo tags attached.
Bug heat6
Complete LimeSurvey version number (& build)121024
I will donate to the project if issue is resolvedNo
BrowserFirefox 15.0.1
Database type & versionMySQL 5.5.25
Server OS (if known)Debian GNU/Linux 6.0.6
Webserver software & version (if known)Apache
PHP Version5.3.3-7+squeeze3

Users monitoring this issue

There are no users monitoring this issue.

Activities

Mazi

Mazi

2012-10-24 20:19

updater   ~21632

Carsten, I think we should add a section on how things are different at LS2. Since you know the system architecture far better, can you have a look at http://docs.limesurvey.org/Installation+security+hints&structure=English+Instructions+for+LimeSurvey#Other_security_issues?

Thanks!
c_schmitz

c_schmitz

2012-10-25 13:37

administrator   ~21648

Updated the documentation.
Holzhauer

Holzhauer

2012-10-25 15:58

reporter   ~21684

Unfortunetly, the changed description does not work either. The script stops somewhere. However, without adapting the values for 'basePath' and 'runtimePath' in configreal.php I don't expect it to work, but setting it as described above does not work, too.
c_schmitz

c_schmitz

2012-11-02 13:09

administrator   ~21906

Added more details

Issue History

Date Modified Username Field Change
2012-10-24 18:01 Holzhauer New Issue
2012-10-24 18:01 Holzhauer Status new => assigned
2012-10-24 18:01 Holzhauer Assigned To => Mazi
2012-10-24 20:18 Mazi Assigned To Mazi => c_schmitz
2012-10-24 20:19 Mazi Note Added: 21632
2012-10-25 13:37 c_schmitz Status assigned => resolved
2012-10-25 13:37 c_schmitz Resolution open => fixed
2012-10-25 13:37 c_schmitz Note Added: 21648
2012-10-25 13:37 c_schmitz Status resolved => closed
2012-10-25 15:58 Holzhauer Note Added: 21684
2012-10-25 15:58 Holzhauer Status closed => feedback
2012-10-25 15:58 Holzhauer Resolution fixed => reopened
2012-11-02 13:09 c_schmitz Note Added: 21906
2012-11-02 13:09 c_schmitz Status feedback => resolved
2012-11-02 13:09 c_schmitz Resolution reopened => fixed
2012-11-02 13:09 c_schmitz Status resolved => closed