Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Check for upload_tmp_dir maybe broken #9

Open
gittoar opened this issue Dec 28, 2015 · 1 comment
Open

Check for upload_tmp_dir maybe broken #9

gittoar opened this issue Dec 28, 2015 · 1 comment

Comments

@gittoar
Copy link

gittoar commented Dec 28, 2015

DocumentRoot /var/www/piwik
upload_tmp_dir /var/www/piwik_tmp (0700)

phpsecinfo.com says "Pass
upload_tmp_dir is enabled, which is the recommended setting. Make sure your upload_tmp_dir path is not world-readable
Current Value: /var/www/piwik_tmp/
Recommended Value: A non-world readable/writable directory
More information »".

SecurityInfo says "unable to retrieve file permissions on upload_tmp_dir".

So the SecurityInfo does not check the return-codes/-infos from phpsecinfo.com properly or the implementation differs from phpsecinfo.com. This is confusing and should be corrected and more documented for minimum debugging purpose. Thanks.

@wwuck
Copy link

wwuck commented Mar 24, 2017

Do you have your tmp dir set in open_basedir?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants