View Issue Details

IDProjectCategoryView StatusLast Update
0006157OXID eShop (all versions)4.11. Image handlingpublic2015-06-24 16:21
Reporterm.wille Assigned To 
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionno change required 
Product Version4.9.4 / 5.2.4 
Summary0006157: execute bit is missing when a new upload directory will be created
DescriptionThe function "_moveImage" in the core file "oxutilsfile.php" creates a new directory for an upload. The execute bit is missing, so you can not read the file.

line 398 in file "oxutilsfile.php"

protected function _moveImage($sSource, $sTarget)
{
    $blDone = false;
    if (!is_dir(dirname($sTarget))) {
        mkdir(dirname($sTarget), 0744, true);
    }
....

TagsNo tags attached.
ThemeNot defined
BrowserNot defined
PHP VersionNot defined
Database VersionNot defined

Activities

QA

2015-06-10 13:42

administrator   ~0011024

Last edited: 2015-06-16 18:02

Reminder sent to: m.wille

The Execute-Bit is set for the owner of the Directory, which is totally sufficient from my point of view.

Is there a reason why Group and or Others should get execute rights on the directory?

FibreFoX

2015-06-10 20:16

reporter   ~0011026

Why not making this configurable? Would make it up to shop-/system-admins. Therefor this becomes a feature-request.

QA

2015-06-24 16:21

administrator   ~0011054

No feedback from reporter for 2 weeks -> closed.