Uploaded image for project: 'phpBB'
  1. phpBB
  2. PHPBB-9610

cache, files, store paths should be configurable

XMLWordPrintable

    • Icon: Improvement Improvement
    • Resolution: Won't Fix
    • Icon: Minor Minor
    • 3.1.12-RC1
    • 3.1.0-dev
    • None

      This is primarily a security feature.

      Currently phpbb code expects cache, files and store directories to be under phbb_root. By php design phpbb_root must be under webserver document root. This results in cache/files/store being under webserver document root as well.

      There is a security concern with having webserver-writable directories under webserver document root. Various workarounds involving symlinks, permissions and webserver configuration are already possible, but there is no need to have these directories under document root at all.

      This ticket proposes making cache, files and store paths configurable so that they may be entirely disconnected from webserver document root.

            CHItA CHItA
            Oleg Oleg [X] (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: