Security notice problem

encho - June 5, 2008 - 12:27
Project:Backup and Migrate
Version:6.x-1.x-dev
Component:Code
Category:bug report
Priority:normal
Assigned:Unassigned
Status:closed
Description

Hi, in admin area of the module I keep getting:

Security notice: Backup and Migrate will not save backup files to the server because the destination directory is publicly accessible. If you want to save files to the server, please secure the '/home/xx/files/xx/backup_migrate' directory

That folder is outside of the server's root, plus the download method is set to 'private'. Also tried changing the permissions so it is not accessible to anyone, different .htaccess files, etc. Nothing worked. And I'm sure that you can not access the files/folders publicly (tried it). Any solution?

#1

ronan - July 13, 2008 - 05:48
Status:active» active (needs more info)

That's very strange. The code that checks for access literally does a http request to the server for a test file and fails if the contents of that file is returned. You should not be receiving this message if the module is unable to read the test file via http.

I'll have been unable to reproduce this locally, is there any more info you can give me that could put me on the right path?

#2

encho - July 14, 2008 - 10:54

With latest version, it stopped complaining. Now it works as it should.

#3

ronan - July 14, 2008 - 14:48
Status:active (needs more info)» fixed

Awesome, I'm glad to hear it's working now.

#4

encho - July 14, 2008 - 17:03

Thank you for the excellent module.

#5

Anonymous (not verified) - July 31, 2008 - 04:46
Status:fixed» closed

Automatically closed -- issue fixed for two weeks with no activity.

 
 

Drupal is a registered trademark of Dries Buytaert.