? Failure

User tests: Successful: Unsuccessful:

avatar n3t
n3t
11 Jan 2017

Pull Request for Issue #13552.

Summary of Changes

isDot check first, before isDir

Testing Instructions

Follow the Issue tracker https://issues.joomla.org/tracker/joomla-cms/13552

avatar n3t n3t - open - 11 Jan 2017
avatar n3t n3t - change - 11 Jan 2017
Status New Pending
avatar joomla-cms-bot joomla-cms-bot - change - 11 Jan 2017
Category Administration com_admin
avatar n3t n3t - change - 17 Feb 2017
Labels Added: ?
avatar joomla-cms-bot joomla-cms-bot - change - 17 Feb 2017
Category Administration com_admin Administration com_admin com_modules Language & Strings
avatar n3t n3t - change - 17 Feb 2017
Labels Added: ?
avatar joomla-cms-bot joomla-cms-bot - change - 17 Feb 2017
Category Administration com_admin com_modules Language & Strings Administration com_modules Language & Strings
avatar zero-24
zero-24 - comment - 17 Feb 2017

@n3t it looks like you committed to the wrong branch?

avatar n3t
n3t - comment - 17 Feb 2017

:-/ yeah, I am not so much familier with github, bit lost now...

avatar joomla-cms-bot joomla-cms-bot - change - 17 Feb 2017
Category Administration com_modules Language & Strings Administration com_admin
avatar n3t
n3t - comment - 17 Feb 2017

Ok, now it should be as before, sorry for complications...

avatar franz-wohlkoenig
franz-wohlkoenig - comment - 18 Feb 2017

@n3t close this Issue?

avatar zero-24
zero-24 - comment - 18 Feb 2017

@franz-wohlkoenig no this should be still a valid fix for the issue.

avatar n3t
n3t - comment - 19 Feb 2017

@franz-wohlkoenig even commits are bit masched up, it still solves the initial issue, and the PR is back in its initial state.

avatar henkrijneveld henkrijneveld - test_item - 31 Mar 2017 - Tested successfully
avatar henkrijneveld
henkrijneveld - comment - 31 Mar 2017

I have tested this item successfully on 277b7ae

open basedir message disappears after applying patch


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/13553.

avatar franz-wohlkoenig franz-wohlkoenig - change - 31 Mar 2017
Status Pending Confirmed
avatar franz-wohlkoenig franz-wohlkoenig - change - 8 Nov 2017
Status Confirmed Discussion
avatar niklas-deworetzki-thm
niklas-deworetzki-thm - comment - 24 Jul 2018

I couldn't reproduce the issue on Linux-4.17.8-1 with PHP7

@icampus


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/13553.

avatar Schmidie64 Schmidie64 - test_item - 24 Jul 2018 - Tested unsuccessfully
avatar Schmidie64
Schmidie64 - comment - 24 Jul 2018

I have tested this item ? unsuccessfully on e1d08ad

I followed the instructions step by step but i coundn't reproduce the issue. I think it can be close.

@icampus


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/13553.

avatar roland-d
roland-d - comment - 24 Jul 2018

@n3t Can you please followup on the unsuccessful tests? Thank you.

avatar csthomas
csthomas - comment - 24 Jul 2018

IMO negative tests were not carried out with full understanding of the problem.

Example.
Php has access to /var/images, then we want to list directory like

$folder = new DirectoryIterator(JPATH_ROOT . '/images');  // In real, it will be `/var/images`

and now we have a list of elements:

.
..
image1.png
image2.png

when we are in line .., php want to get access to /var/images/.. which is /var and then we get the error because php has access only to /var/images not /var.

This PR is valid. I did code review.

avatar roland-d
roland-d - comment - 24 Jul 2018

@csthomas Thank you for your input. @Schmidie64 @niklas-deworetzki-thm Please review your testing and check again.

avatar niklas-deworetzki-thm
niklas-deworetzki-thm - comment - 25 Jul 2018

@csthomas oh, now I see the problem here. I'm sorry, I misunderstood at first, that he had problems with accessing the symlinked directory.
But as far as I understand now, the problem is not the symlink. PHP tries to check isDir on .. . This folder is not in baseDir. So PHP fails and shows an error. And this error is 1. unnecessary and 2. shows critical information about the system path to the user.

I'm testing it now, knowing the real issue. Thank you for clarifying it.

@icampus

avatar niklas-deworetzki-thm niklas-deworetzki-thm - test_item - 25 Jul 2018 - Tested successfully
avatar niklas-deworetzki-thm
niklas-deworetzki-thm - comment - 25 Jul 2018

I have tested this item successfully on e1d08ad

Tested this successfully as specified by @csthomas


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/13553.

avatar franz-wohlkoenig
franz-wohlkoenig - comment - 25 Jul 2018

@henkrijneveld can you please retest?

avatar n3t
n3t - comment - 25 Jul 2018

@csthomas yes your explanation is exact. problem is not symlink itself, but isdir check to dots folders, which don't need to be accessible...

avatar roland-d
roland-d - comment - 25 Jul 2018

@Schmidie64 Can you please test this again?

avatar HLeithner HLeithner - change - 30 Jun 2019
Status Discussion Fixed in Code Base
Closed_Date 0000-00-00 00:00:00 2019-06-30 23:30:51
Closed_By HLeithner
avatar HLeithner HLeithner - close - 30 Jun 2019
avatar HLeithner HLeithner - merge - 30 Jun 2019
avatar HLeithner
HLeithner - comment - 30 Jun 2019

Thx @n3t, good things need sometime sometimes...

Add a Comment

Login with GitHub to post a comment