XOOPS 
Forum
Forum Index General Forums Community Support Modules Support Themes Support Development International Support Module Hack Reviews Theme Designer Talk
  1. Board index / 
  2. XOOPS Community Support forums / 
  3. Beginner's Corner 
  4.  / xoops_data and xoops_lib inside DocumentRoot warning
Register
1
mailman
xoops_data and xoops_lib inside DocumentRoot warning

  • 2009/7/31 16:14

  • mailman

  • Just popping in

  • Posts: 1

  • Since: 2009/7/31


Hi,
I got a warning about these 2 directories when logging in the first time. I moved the directories to a folder outside of my XOOPS directory and added symbolic links to them. I'm getting the same message (I'm not too suprised ).

Which directory should I move these two directories into to avoid security issues?
2
badb0iie
Re: xoops_data and xoops_lib inside DocumentRoot warning

  • 2009/8/1 2:55

  • badb0iie

  • Just popping in

  • Posts: 41

  • Since: 2009/8/1 2


yes i would like to know the same answer to please =)
Shuffle Up & Deal!
3
ghia
Re: xoops_data and xoops_lib inside DocumentRoot warning

  • 2009/8/1 9:48

  • ghia

  • Community Support Member

  • Posts: 4953

  • Since: 2008/7/3 1


You may choose it, but it has to be below your web root, eg:

home
|_public_html
| |_index.html
| |_index.php
| |_mainfile.php
| |_install
| |_modules
|   |_system
|
|_xoops_trust_path
  |_xoops_data
  | |_configs
  | |_caches
  |   |_smarty_cache
  |   |_smarty_compile
  |   |_xoops_cache
  |_xoops_lib
    |_modules
      |_protector

NB - Not all files and directories are depicted.
- home represents a directory path to below your website root (/home/public_html/) eg /var/www/youraccount/.
- the name of the webroot directory public_html may be different at your server eg htdocs.
- not all servers support execution of PHP files in directories other than the web root (and some have a specific directory for it).
4
badb0iie
Re: xoops_data and xoops_lib inside DocumentRoot warning

  • 2009/8/2 5:35

  • badb0iie

  • Just popping in

  • Posts: 41

  • Since: 2009/8/1 2


once these files are moved how does the site kno where they are?
where do i go to make the changes in the codes?

i put symlinks in my public_html file ...the site works
but i still have the warning,,,

so im sure im doing somthing wrong lol
Shuffle Up & Deal!
5
DonCurioso
Re: xoops_data and xoops_lib inside DocumentRoot warning

Edit mainfile.php & change paths of xoops_data & xoops_lib. If you really move outside XOOPS root, XOOPS needs to know it!

Easy, fastest & messages warning will dissapear.

Regards.

HispaXoops | Xoops España

That's the way i like it! | Nada mejor que una Alhambra bien helada con aceitunas...
6
badb0iie
Re: xoops_data and xoops_lib inside DocumentRoot warning

  • 2009/8/11 0:38

  • badb0iie

  • Just popping in

  • Posts: 41

  • Since: 2009/8/1 2


Thanks for the help!
I got it fixed =)
7
ghia
Re: xoops_data and xoops_lib inside DocumentRoot warning

  • 2009/8/11 7:48

  • ghia

  • Community Support Member

  • Posts: 4953

  • Since: 2008/7/3 1


For not getting hacked, make sure the symlinks are removed.
8
DJ007
Re: xoops_data and xoops_lib inside DocumentRoot warning

  • 2009/10/12 21:14

  • DJ007

  • Just popping in

  • Posts: 61

  • Since: 2004/2/15


Moved both folders as suggested into a newly created folder I called xoops_trust and deleted both folders from the root directory, then defined the paths to both in mainfile.php..

Now I get ROOT/xoops_trust/xoops_lib
& ROOT/xoops_trust/xoops_data is inside DocumentRoot!

New install of 2.3.3b
Ideas?
Thnx.
9
ghia
Re: xoops_data and xoops_lib inside DocumentRoot warning

  • 2009/10/12 22:09

  • ghia

  • Community Support Member

  • Posts: 4953

  • Since: 2008/7/3 1


It is probably still not outside the document root (<> XOOPS root). Study the diagram.
10
bjuti
Re: xoops_data and xoops_lib inside DocumentRoot warning

  • 2009/10/12 23:45

  • bjuti

  • Just can't stay away

  • Posts: 871

  • Since: 2009/1/7 2


I have the same problem on 1and1.com...

mydomain.com is assigned to htdocs/xoops, and trust/data dir is in htdocs coz there is no way to go beyond htdocs via ftp.
(1) 2 »

Login

Register now!  |  Lost Password?

Search

Advanced Search

Recent Posts

Who's Online

345 user(s) are online (194 user(s) are browsing Support Forums)

Members: 0

Guests: 345

more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Nov 30
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits