#4007 - Possibility of open_basedir error while searching for theme images

Identifier #4007
Issue type Trivial issue (does not break functionality)
Title Possibility of open_basedir error while searching for theme images
Status Completed
Handling member Chris Graham
Version 10.0.28
Addon core
Description If someone places a file in the theme images directory structure that matches the name of what is expected to be a directory, PHP may show an error due to this PHP bug:
https://bugs.php.net/bug.php?id=52065

This is a simple workaround.

This bug is an unlikely combination of factors. It is even less unlikely to affect other parts of Composr, as it is even less likely to put such a random file in other parts of the system and for it to match a name that is actually expected as a directory.
Steps to reproduce

Funded? No
Hotfixes

hotfix-4007, 2019-12-15 1am.tar

Only apply these hotfixes if you absolutely need them and cannot wait until the next release of Composr (releases are more reliable and strictly tested). We provide no guarantee that hotfixes will work; they may even break your site especially if a hotfix depends on another hotfix. Always make a site backup if you attempt to apply a hotfix.

As of Composr version 11, the recommended way to apply a hotfix is by following the same steps as an upgrade:

  1. Download the hotfix into the data_custom folder of your Composr installation directory
  2. Back up your site
  3. Go to yourbaseurl/upgrader.php
  4. When you get to the 'Transfer across new/updated files' step, use the hotfix that you downloaded.
  5. The upgrader will automatically apply hotfix files, skipping any files belonging to addons that you do not have installed, and also skipping hotfix files that are older than the files on disk
  6. Run a database upgrade if prompted
  7. You may wish to run a file integrity scan and resolve issues.

For Composr version 10, manually extract the files (e.g., using 7-Zip) and overwrite files in your Composr installation that are older than the ones in the hotfix (check the file modification date/time). Skip hotfix files that do not exist in your installation.
Commits

Fixed MANTIS-4007 (Possibility of open_basedir error while searching for theme images) (a520875c) · Commits · Composr ecosystem / Composr · GitLab
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".

Rating

Unrated