1
peterr
Various modules - 404's
  • 2011/3/29 3:02

  • peterr

  • Just can't stay away

  • Posts: 518

  • Since: 2004/8/5 9


Using XOOPS 2.5.0

Module - xreaggregator

404 - /public_html/modules/xreaggregator/images/bg.gif
Many referers

Module - Protector

404 - /public_html/modules/protector/css
referer:http://example.com/modules/protector/admin/index.php?page=advisory

404 - /public_html/XOOPS_TRUST_PATH
referer:http://example.com/modules/protector/admin/index.php?page=advisory

In the last one, Protector is looking in the wrong place, as the XOOPS_TRUST_PATH is outside of the web root, not inside.

Peter

2
Mamba
Re: Various modules - 404's
  • 2011/3/29 5:33

  • Mamba

  • Moderator

  • Posts: 11366

  • Since: 2004/4/23


Quote:
In the last one, Protector is looking in the wrong place, as the XOOPS_TRUST_PATH is outside of the web root, not inside.

Maybe there is a mistake in your mainfile.php?

Did you just upgrade your Website to 2.5.0?

Maybe you need to clear the Cache?

And check if the Protector files are in the right places?
Support XOOPS => DONATE
Use 2.5.10 | Docs | Modules | Bugs

3
peterr
Re: Various modules - 404's
  • 2011/3/29 6:47

  • peterr

  • Just can't stay away

  • Posts: 518

  • Since: 2004/8/5 9


I have this structure ..

/home/username/
/home/username/public_html
/home/username/secretpathname/
/home/username/secretpathname/renamed_xoops_data
/home/username/secretpathname/renamed_xoops_lib

Quote:

Mamba wrote:

Maybe there is a mistake in your mainfile.php?


Here is the mainfile.php , with obvious security changes ..

// XOOPS Physical Paths

    // Physical path to the XOOPS documents (served) directory WITHOUT trailing slash

    
define('XOOPS_ROOT_PATH''/home/username/public_html');


    
// For forward compatibility

    // Physical path to the XOOPS library directory WITHOUT trailing slash

    
define('XOOPS_PATH''/home/username/secretpathname/renamed_xoops_lib');

    
// Physical path to the XOOPS datafiles (writable) directory WITHOUT trailing slash

    
define('XOOPS_VAR_PATH''/home/username/secretpathname/renamed_xoops_data');

    
// Alias of XOOPS_PATH, for compatibility, temporary solution

    
define("XOOPS_TRUST_PATH"XOOPS_PATH);


    
// URL Association for SSL and Protocol Compatibility

    
$http 'http://';

    if (!empty(
$_SERVER['HTTPS'])) {

        
$http = ($_SERVER['HTTPS']=='on') ? 'https://' 'http://';

    }

    
define('XOOPS_PROT'$http);


    
// XOOPS Virtual Path (URL)

    // Virtual path to your main XOOPS directory WITHOUT trailing slash

    // Example: define('XOOPS_URL', 'http://example.com');

    
define('XOOPS_URL''http://example.com');


Quote:

Mamba wrote:
Did you just upgrade your Website to 2.5.0?


I removed everything, and did a fresh install of 2.5.0; had to wipe as couldn't login to XOOPS for ages.

Quote:

Mamba wrote:
Maybe you need to clear the Cache?


Under System | Prefs | General Settings , there are 3 cache settings down the bottom, and they are all 'no cache'.

Quote:

Mamba wrote:
And check if the Protector files are in the right places?


When I look at admin | protector , it seems the paths are looking okay. For example, where you define IP's to ban, it has the full pathname correctly.

The 'security advisor' TAB in protector has a link up the top which says "Check php files inside TRUST_PATH are private (it must be 404,403 or 500 error" , and that link is resolved incorrectly. It has resolved tohttp://example.com/secretpathname/renamed_xoops_lib/modules/protector/public_check.php , which is wrong, it should be /home/username/secretpathname/renamed_xoops_lib/modules/protector/public_check.php

Thanks,

Peter

4
peterr
Re: Various modules - 404's
  • 2011/4/4 11:03

  • peterr

  • Just can't stay away

  • Posts: 518

  • Since: 2004/8/5 9


regarding Module - xreaggregator

404 - /public_html/modules/xreaggregator/images/bg.gif

For now, I used the file /modules/system/images/menu/bg.gif from core version 2.5.0

Will let the author know, at least it will stop one set of 404's.

Peter

Login

Who's Online

221 user(s) are online (127 user(s) are browsing Support Forums)


Members: 0


Guests: 221


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Mar 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits