FS#3572 - session.save_path directory listing possible for everyone

Till Brehm

2014-07-27 5aedfd4b6c0ebd2277f03b49bb21c409ac3595cc

FS#3572 - session.save_path directory listing possible for everyone

 server/plugins-available/apache2_plugin.inc.php

@@ -710,7 +710,7 @@
                $app->system->chmod($data['new']['document_root'].'/ssl', 0755);

                // make tmp directory writable for Apache and the website users
                $app->system->chmod($data['new']['document_root'].'/tmp', 0777);
                $app->system->chmod($data['new']['document_root'].'/tmp', 0770);

                // Set Log directory to 755 to make the logs accessible by the FTP user
                if(realpath($data['new']['document_root'].'/'.$log_folder . '/error.log') == '/var/log/ispconfig/httpd/'.$data['new']['domain'].'/error.log') {
@@ -770,7 +770,7 @@
                $app->system->chmod($data['new']['document_root'].'/cgi-bin', 0755);

                // make temp directory writable for Apache and the website users
                $app->system->chmod($data['new']['document_root'].'/tmp', 0777);
                $app->system->chmod($data['new']['document_root'].'/tmp', 0770);

                // Set Log directory to 755 to make the logs accessible by the FTP user
                if(realpath($data['new']['document_root'].'/'.$log_folder . '/error.log') == '/var/log/ispconfig/httpd/'.$data['new']['domain'].'/error.log') {

 server/plugins-available/nginx_plugin.inc.php

@@ -714,7 +714,7 @@
                $app->system->chmod($data['new']['document_root'].'/ssl', 0755);

                // make tmp directory writable for nginx and the website users
                $app->system->chmod($data['new']['document_root'].'/tmp', 0777);
                $app->system->chmod($data['new']['document_root'].'/tmp', 0770);

                // Set Log directory to 755 to make the logs accessible by the FTP user
                if(realpath($data['new']['document_root'].'/'.$log_folder . '/error.log') == '/var/log/ispconfig/httpd/'.$data['new']['domain'].'/error.log') {
@@ -774,7 +774,7 @@
                $app->system->chmod($data['new']['document_root'].'/cgi-bin', 0755);

                // make temp directory writable for nginx and the website users
                $app->system->chmod($data['new']['document_root'].'/tmp', 0777);
                $app->system->chmod($data['new']['document_root'].'/tmp', 0770);

                // Set Log directory to 755 to make the logs accessible by the FTP user
                if(realpath($data['new']['document_root'].'/'.$log_folder . '/error.log') == '/var/log/ispconfig/httpd/'.$data['new']['domain'].'/error.log') {