matomo-org / matomo-org/plugin-SecurityInfo
Check for save_path maybe broken
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 24
- Forks
- 17
- Avg merge
- 13h 14m
- Merged PRs (30d)
- 5
Description
save_path /var/lib/php5 (1733)
phpsecinfo.com says "Pass
save_path is enabled, which is the recommended setting. Make sure your save_path path is not world-readable
Current Value: /var/lib/php5
Recommended Value: A non-world readable/writable directory
More information »".
SecurityInfo says "unable to retrieve file permissions on save_path".
So the SecurityInfo does not check the return-codes/-infos from phpsecinfo.com properly or the implementation differs from phpsecinfo.com. This is confusing and should be corrected and more documented for minimum debugging purpose. Thanks.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the SecurityInfo handling for the PHP save_path value and compare its permission and status reporting with the phpsecinfo.com output quoted in the issue. Confirm why the return information differs or cannot be retrieved, then ensure the result is corrected and documented for debugging.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100