Opened 3 years ago

Closed 3 years ago

Last modified 3 years ago

#1993 closed Bug (fixed)

SecurityInfo plugin: fileperms error with session.save_path

Reported by: wklueter Owned by:
Priority: normal Milestone: Piwik 1.2
Component: Core Keywords:
Cc: Sensitive: yes

Description

There is an error. Please report the message and full backtrace in the Piwik forums.

Warning: fileperms() [<a href='function.fileperms'>function.fileperms</a>]: stat failed for 2;/var/tmp in /mnt/web6/10/34/51062934/htdocs/piwik/plugins/SecurityInfo/PhpSecInfo/Test/Session/save_path.php on line 69

Backtrace -->
#0 Piwik_ErrorHandler(2, fileperms() [<a href='function.fileperms'>function.fileperms</a>]: stat failed for 2;/var/tmp, /mnt/web6/10/34/51062934/htdocs/piwik/plugins/SecurityInfo/PhpSecInfo/Test/Session/save_path.php, 69, Array ())#1 fileperms(2;/var/tmp) called at mnt/web6/10/34/51062934/htdocs/piwik/plugins/SecurityInfo/PhpSecInfo/Test/Session/save_path.php:69#2 PhpSecInfo_Test_Session_Save_Path->_execTest() called at mnt/web6/10/34/51062934/htdocs/piwik/plugins/SecurityInfo/PhpSecInfo/Test/Test.php:182#3 PhpSecInfo_Test->test() called at mnt/web6/10/34/51062934/htdocs/piwik/plugins/SecurityInfo/PhpSecInfo/PhpSecInfo.php:279#4 PhpSecInfo->runTests() called at mnt/web6/10/34/51062934/htdocs/piwik/plugins/SecurityInfo/PhpSecInfo/PhpSecInfo.php:476#5 PhpSecInfo->loadAndRun() called at mnt/web6/10/34/51062934/htdocs/piwik/plugins/SecurityInfo/Controller.php:28#6 Piwik_SecurityInfo_Controller->index()#7 call_user_func_array(Array ([0] => Piwik_SecurityInfo_Controller Object ([] => SecurityInfo,[] => 2011-01-10,[] => Piwik_Date Object ([] => 1294661963,[] => UTC),[] => 1,[] => Piwik_Site Object ([] => 1)),[1] => index), Array ()) called at mnt/web6/10/34/51062934/htdocs/piwik/core/FrontController.php:125#8 Piwik_FrontController->dispatch() called at mnt/web6/10/34/51062934/htdocs/piwik/index.php:60

Change History (3)

comment:1 Changed 3 years ago by vipsoft (robocoder)

  • Keywords Error removed

Yes, the test doesn't handle save_path's that use the subdirectory feature, e.g., "2;/var/tmp". http://ca3.php.net/manual/en/session.configuration.php#ini.session.save-path

This is an upstream bug. I don't believe it's a security issue, but will leave ticket marked as sensitive at your request.

comment:2 Changed 3 years ago by vipsoft (robocoder)

  • Resolution set to fixed
  • Status changed from new to closed

(In [3693]) fixes #1993

comment:3 Changed 3 years ago by vipsoft (robocoder)

  • Summary changed from Error by piwik Button"Sicherheit" ( Safety ) to SecurityInfo plugin: fileperms error with session.save_path
Note: See TracTickets for help on using tickets.