XOOPS 
Forum
Forum Index General Forums Community Support Modules Support Themes Support Development International Support Module Hack Reviews Theme Designer Talk
  1. Board index / 
  2. XOOPS Community Support forums / 
  3. Installation Troubleshooting 
  4.  / Xoops Lib and Xoops Data
Register
1
fahmis0921
Xoops Lib and Xoops Data

  • 2009/9/20 6:10

  • fahmis0921

  • Friend of XOOPS

  • Posts: 12

  • Since: 2006/3/17


Guys,
I have problem with installation XOOPS 2.3.3, in admin site always come up with notification :
WARNING: Folder C:/AppServ/www/xoops/xoops_lib is inside DocumentRoot!
For security considerations it is highly suggested to move it out of DocumentRoot.

WARNING: Folder C:/AppServ/www/xoops/xoops_data is inside DocumentRoot!
For security considerations it is highly suggested to move it out of DocumentRoot.

after I remove that folder the site is down.

What is notification mean? and how to solve this? thank you



2
deka87
Re: Xoops Lib and Xoops Data

  • 2009/9/20 6:36

  • deka87

  • Friend of XOOPS

  • Posts: 1125

  • Since: 2007/10/5


the issue has been discussed lots of times on the forums. do not delete the folders cos they are vital for your xoops. you were ecouraged to rename those when installing your brand new XOOPS or even move them into any other folder preferably out of you website root (e.g. C:/AppServ/www/mydatafolder and C:/AppServ/www/mylibsfolder)
3
ghia
Re: Xoops Lib and Xoops Data

  • 2009/9/20 7:40

  • ghia

  • Community Support Member

  • Posts: 4953

  • Since: 2008/7/3 1


Correct order to try and for most security:
- move the folders
- rename the folders (addionally .htaccess)
Don't forget to adapt /mainfile.php and its permissions (chmod).
4
andrey3761
Re: Xoops Lib and Xoops Data

Quote:
(e.g. C:/AppServ/www/mydatafolder and C:/AppServ/www/mylibsfolder)


C:/AppServ/xoops_lib and C:/AppServ/xoops_data
5
fahmis0921
Re: Xoops Lib and Xoops Data

  • 2009/9/20 14:40

  • fahmis0921

  • Friend of XOOPS

  • Posts: 12

  • Since: 2006/3/17


guys,

thank you...but when I rename xoops_data to xoops_data1 then after refresh the website will auto create folder xoops_data again and continue with error message that cannot find xoops_data root

So I'm trying to edit admin.php to inactive code which show the notification. and its work

I'm afraid that will inherit other problem please advise...

Thank you
6
ghia
Re: Xoops Lib and Xoops Data

  • 2009/9/20 15:04

  • ghia

  • Community Support Member

  • Posts: 4953

  • Since: 2008/7/3 1



Disabling the error messages is not resolving the problem that your site is vulnerable and can be hacked any moment.

Did you adapt the definitions for these paths in mainfile.php while changing their location or name?
7
fahmis0921
Re: Xoops Lib and Xoops Data

  • 2009/9/20 15:35

  • fahmis0921

  • Friend of XOOPS

  • Posts: 12

  • Since: 2006/3/17


I didn't adapt, I'm trying to rename in mainfile for document root and not work as well
8
fahmis0921
Re: Xoops Lib and Xoops Data

  • 2009/9/20 15:47

  • fahmis0921

  • Friend of XOOPS

  • Posts: 12

  • Since: 2006/3/17


If I delete xoops_data and xoops_lib, website will show:
This page cannot be displayed due to an internal error.

You can provide the following information to the administrators of this site to help them solve the problem:

Error: Smarty error: the $compile_dir 'C:/AppServ/www/xoops/MYxoops_data/caches/smarty_compile' does not exist, or is not a directory.
Backtrace:
/class/smarty/Smarty.class.php (1092)
/class/smarty/internals/core.write_compiled_resource.php (20)
/class/smarty/Smarty.class.php (1430)
/class/smarty/Smarty.class.php (1260)
/class/theme_blocks.php (144)
/class/theme_blocks.php (97)
/class/theme_blocks.php (38)
/class/theme.php (250)
/class/theme.php (75)
/header.php (66)
/index.php (78)
9
sailjapan
Re: Xoops Lib and Xoops Data

You've read, understood and followed the instructions in the release notes (2.3.3), right?
Quote:
Installing XOOPS
-----------------------------------
1. >snip<
2. >snip<
3. For security considerations, you are encouraged to move directories "/xoops_lib" (for XOOPS libraries) and "/xoops_data" (for XOOPS data) out of document root, or even change the folder names.
4. Make the directory xoops_data/ writable; Create (if not already present) and make the directories xoops_data/caches/, xoops_data/caches/xoops_cache/, xoops_data/caches/smarty_cache/ and xoops_data/caches/smarty_compile/ writable.
5. >snip<


Installing Protector in XOOPS
-----------------------------------
We also highly recommend the installation of the PROTECTOR module which will bring additional security protection and logging capabilities to your site:
To install protector module with a fresh new installation of XOOPS, delete the mainfile.dist.php available at the XOOPS root, copy /extras/mainfile.dist.php.protector to /htdocs/mainfile.dist.php and rename it to mainfile.dist.php BEFORE installing XOOPS.

>snip<
10
fahmis0921
Re: Xoops Lib and Xoops Data

  • 2009/9/21 9:21

  • fahmis0921

  • Friend of XOOPS

  • Posts: 12

  • Since: 2006/3/17


Thank you for still help me but warning notification still show
WARNING: Folder C:/AppServ/www/xoops/xoops_lib is inside DocumentRoot!
For security considerations it is highly suggested to move it out of DocumentRoot.

WARNING: Folder C:/AppServ/www/xoops/xoops_data is inside DocumentRoot!
For security considerations it is highly suggested to move it out of DocumentRoot.

If I do like command above website wont run

What exactly should I do

Thank you

Note: I'm still running in localhost
(1) 2 3 »

Login

Register now!  |  Lost Password?

Search

Advanced Search

Recent Posts

Who's Online

445 user(s) are online (316 user(s) are browsing Support Forums)

Members: 0

Guests: 445

more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Nov 30
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits