17
Hi Scionwest.
Bad news...
https://sourceforge.net/docs/E07/en/#permissions
"All content on the project web servers that needs to be written by the project web servers must be world-writeable and be placed under the /tmp/persistent directory (create a subdirectory for use by your project files)."
"Place the data in the /tmp/persistent directory, accessible from and shared between the project shell and web servers. Projects should create their own subdirectory in /tmp/persistent and make frequent backups of the data. We strongly discourage the use of file-writing applications with our services, due to the security implications of our shared web environment. Users of applications in the project web services that require file-writing are strongly encouraged to look for alternatives that can use a MySQL database for data storage instead."
Make directory templates_c inside insecure directory mentioned above, then change settings in common.php file from:
define("XOOPS_COMPILE_PATH", XOOPS_ROOT_PATH."/templates_c");
to:
define("XOOPS_COMPILE_PATH", "/tmp/persistent/templates_c");
Do the same with /upload and /cache directory.
define("XOOPS_UPLOAD_PATH", XOOPS_ROOT_PATH."/uploads");
define("XOOPS_CACHE_PATH", XOOPS_ROOT_PATH."/cache");
For security reason, insert something between /tmp/persistent and directory like templates_c, b.e. /tmp/persistent/mysecretdirectory/templates_c/
regards,
wodnick
ps. I'm going to sleep now, but early morning this page must work!!! ;)
