Re: [Phpgroupware-users] index_main_b0_l2.tpl does not exist.

[Chris Weiss]

if your phpgw install is in /var/www/phpgroupware then do this:

mv /var/www/phpgroupware/files /var/phpgwfiles

then change the path in setup/config step 2 to /var/phpgwfiles.

The reason for this is that uploaded files are by default world readable from 
just
http://server/phpgroupware/files without having to first auth to phpgw.  This 
also
means that a user could upload a php script in there and run it from outside 
and do
ANYTHING to your system, including read your header.inc.php and get your admin 
and
database passwords.


Phil Emilson (address@hidden) wrote:
>
>ok, no problem with this, everything went smooth enough, but I do have this
>now that I ve upgraded, I use to have a files folder for the phpwebhosting
>app, no when I go there I get: Path to User and Group files HAS TO BE
>OUTSIDE of the webservers document-root!!!*
> I have checked config.php and seen the comment about out side path for
>security , I renamed the field in that file, I laso checked header.inc,
>nothing has changed, the first two lines are identical.
>
>Ideas?
>
>Phil
>
>
>
>
>
>
>
>----- Original Message -----
>From: "Chris Weiss" <address@hidden>
>To: <address@hidden>
>Sent: Saturday, July 19, 2003 6:09 PM
>Subject: Re: [Phpgroupware-users] index_main_b0_l2.tpl does not exist.
>
>
>> upgrade is exactly the same as installation, just skip the database
>creation.  the
>> setup script will detect the exsisting configuration and use it.
>>
>> as always when upgrading anything, make a backup of everything first.
>>
>> The easiest way is to skip the tarball and just run `cvs -z6 update -dP`
>from the
>> phpgroupware root then run setup
>>
>> Phil Emilson (address@hidden) wrote:
>> >
>> >I downloaded the newest version, I have seacrhed through archives and
>> >documents looking at how to upgrade, when I enable auto detect for
>updates
>> >it shows only one application needing an upgrade, although I am running ;
>> >0.9.14.002 and downloaded 0.9.14.005, but have yet untarred it for fear i
>do
>> >something wrong, please provide an url to a document if such exists so I
>may
>> >read how? or any one offer some quick advice? Thank you for your time.
>> >
>> >Phil
>> >----- Original Message -----
>> >From: "Dave Hall" <address@hidden>
>> >To: <address@hidden>
>> >Sent: Thursday, July 17, 2003 7:39 AM
>> >Subject: Re: [Phpgroupware-users] index_main_b0_l2.tpl does not exist.
>> >
>> >
>> >> Hi Phil,
>> >>
>> >> A couple of things
>> >>
>> >> * please only send HTML mail to this list
>> >>
>> >> * .002 is insecure - update to atleast 004.
>> >>
>> >> Let us know if that fixes it.
>> >>
>> >> Cheers
>> >>
>> >> Dave
>> >> Content-Type: multipart/alternative;
>> >> boundary="----=_NextPart_000_000D_01C34C32.DC0B7500"
>> >>
>> >>
>> >> ------=_NextPart_000_000D_01C34C32.DC0B7500
>> >> Content-Type: text/plain;
>> >> charset="iso-8859-1"
>> >> Content-Transfer-Encoding: quoted-printable
>> >>
>> >> Hi people , I am using  0.9.14.002, adn I recently installed Idots,
>then =
>> >> iI grabbed the latest from anglemail, everything seemed to go fine till
>=
>> >> I hit the email link, and it halted. I have searched the lists, but I =
>> >> didnt find any answers regarding this error? I think maybe a world
>write =
>> >> is in order?The url itslef points tofile /home/viking, when I am pretty
>=
>> >> sure it needs to be home/viking/public_html.Where to make the correct =
>> >> changes for this to work, any one seen this or know what I need to do
>> >>
>> >> Template Error: filename: file =
>> >>
>/home/viking/public_html/office/email/templates/default/index_main_b0_l2.=
>> >> tpl does not exist.
>> >> Halted.=20
>> >>
>> >> Much Thnx
>> >> Phil
>> >>
>> >>
>> >> ---
>> >> Outgoing mail is certified Virus Free.
>> >> Checked by AVG anti-virus system (http://www.grisoft.com).
>> >> Version: 6.0.488 / Virus Database: 287 - Release Date: 6/5/2003
>> >> ------=_NextPart_000_000D_01C34C32.DC0B7500
>> >> Content-Type: text/html;
>> >> charset="iso-8859-1"
>> >> Content-Transfer-Encoding: quoted-printable
>> >>
>> >> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
>> >> <HTML><HEAD>
>> >> <META http-equiv=3DContent-Type content=3D"text/html; =
>> >> charset=3Diso-8859-1">
>> >> <META content=3D"MSHTML 6.00.2800.1170" name=3DGENERATOR>
>> >> <STYLE></style>
>> >> </head>
>> >> <BODY bgColor=3D#ffffff>
>> >> <DIV><STRONG>Hi people , </strong>I am using  0.9.14.002, adn I =
>> >> recently=20
>> >> installed Idots, then iI grabbed the latest from anglemail, everything
>=
>> >> seemed to=20
>> >> go fine till I hit the email link, and it halted. I have searched the =
>> >> lists, but=20
>> >> I didnt find any answers regarding this error? I think maybe a world =
>> >> write is in=20
>> >> order?The url itslef points tofile /home/viking, when I am pretty sure
>=
>> >> it needs=20
>> >> to be home/viking/public_html.Where to make the correct changes for
>this =
>> >> to=20
>> >> work, any one seen this or know what I need to do</div>
>> >> <DIV><STRONG></strong> </div>
>> >> <DIV><STRONG>Template Error:</strong> filename: file=20
>> >>
>/home/viking/public_html/office/email/templates/default/index_main_b0_l2.=
>> >> tpl=20
>> >> does not exist.<BR><B>Halted.</b> </div>
>> >> <DIV><STRONG></strong> </div>
>> >> <DIV><STRONG>Much Thnx</strong></div>
>> >> <DIV><STRONG>Phil</strong></div>
>> >> <DIV> </div>
>> >> <DIV><STRONG><BR>---<BR>Outgoing mail is certified Virus =
>> >> Free.<BR>Checked by AVG=20
>> >> anti-virus system (<A=20
>> >>
>href=3D"http://www.grisoft.com";>http://www.grisoft.com</a>).<BR>Version: =
>> >> 6.0.488 /=20
>> >> Virus Database: 287 - Release Date: =
>> >> 6/5/2003</strong></div></body></html>
>> >>
>> >> ------=_NextPart_000_000D_01C34C32.DC0B7500--
>> >>
>> >
>> >
>>
>>---------------------------------------------------------------------------
>-
>> >----
>> >
>> >
>> >> _______________________________________________
>> >> Phpgroupware-users mailing list
>> >> address@hidden
>> >> http://mail.gnu.org/mailman/listinfo/phpgroupware-users
>> >>
>> >
>> >
>>
>>---------------------------------------------------------------------------
>-
>> >----
>> >
>> >
>> >> _______________________________________________
>> >> Phpgroupware-users mailing list
>> >> address@hidden
>> >> http://mail.gnu.org/mailman/listinfo/phpgroupware-users
>> >>
>> >
>> >
>> >---
>> >Outgoing mail is certified Virus Free.
>> >Checked by AVG anti-virus system (http://www.grisoft.com).
>> >Version: 6.0.502 / Virus Database: 300 - Release Date: 7/18/2003
>> >
>> >
>> >
>> >_______________________________________________
>> >Phpgroupware-users mailing list
>> >address@hidden
>> >http://mail.gnu.org/mailman/listinfo/phpgroupware-users
>> >
>>
>>
>>
>> _______________________________________________
>> Phpgroupware-users mailing list
>> address@hidden
>> http://mail.gnu.org/mailman/listinfo/phpgroupware-users
>>
>
>
>---
>Outgoing mail is certified Virus Free.
>Checked by AVG anti-virus system (http://www.grisoft.com).
>Version: 6.0.502 / Virus Database: 300 - Release Date: 7/18/2003
>
>
>
>_______________________________________________
>Phpgroupware-users mailing list
>address@hidden
>http://mail.gnu.org/mailman/listinfo/phpgroupware-users
>