1
Smartkuttan
Script is not inside XOOPS_ROOT_PATH and cannot run means???

Dear XOOPS people my portal was working fine for the past 1 month today my vistors noticed me s strange problem on my site
check this
http://www.celebrantsindia.org

We have done nothing on the site and the site was running fine what happend for XOOPS all the paths and every thing has been don correct and it was working well dear friends
tell me what happend what should i do fast
every thing was working fine and now what happend

2
jensclas
Re: Help Possible Xoops Exploit hacking attempt on my Xoops Portal

Check with your host as they may have done something without you knowing. Do a search on :
Script is not inside XOOPS_ROOT_PATH and cannot run and you are sure to find the answers. I will change your subject header too - you need to be specific when you want help quickly. Some people know what to do without looking it up (I have to look it up )

3
Smartkuttan
Re: Help Possible Xoops Exploit hacking attempt on my Xoops Portal

Some one pls help me where shall i find this and edit i poosible think that my host has movied this as i found in

https://xoops.org/modules/newbb/viewtopic.php?topic_id=52123&forum=7&post_id=230154#forumpost230154

that post but he is not telling how he soloved his problem
can some one please help me

4
jensclas
Re: Help Possible Xoops Exploit hacking attempt on my Xoops Portal

I followed one of the links in this thread you found - you must contact your host:

Quote:
Solved...so not an emergency anymore!

This is an edited response from my web host...it seems XOOPS is recognised as being superb even by web hosting firms

"We made some slight changes yesterday, and set http://www.f3.org.uk as a symlink to point to f3.org.uk

Normally this would work fine, but it seems that the security routines in XOOPS are well-written and recognise a symlink from the true path.

If you set the server path in the configs to /content/StartupHostPlus/somevalues/f3.org.uk (remove the www. before f3.org.uk), then it should work correctly again.
"

And it did! I changed the values as suggested, and also the XOOPS_ROOT_PATH check back to 1 in mainfile.php so that all security checks are carried out again. It's strange that my phpinfo.php file not detail the physical path as being different, although I wonder if this was due to caching on the server or something.

My sincerest of thanks again to Skalpa for providing a workaround and Herko for being very much correct in the cause of the problem.

Cheers, and rock on!!


The link is here

Login

Who's Online

268 user(s) are online (59 user(s) are browsing Support Forums)


Members: 0


Guests: 268


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Oct 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits