Jump to content

Upgrade to 5.2.6 breaks if you have a custom admin folder.


AssociatedVOIP

Recommended Posts

Yes, I can confirm this bug in 5.2.6 build 4:

 

$customadminpath = '.billadmin';

 

but when login in into admin area (https://www.********.us/.billadmin/):

 

Language Folder Not Found

 

In 5.2.5 this configuration works well

 

 

PS: without "." (admin area https://www.********.us/billadmin/) and

 

$customadminpath = 'billadmin';

 

works well

Edited by drew13
Link to comment
Share on other sites

Yes, I can confirm this bug in 5.2.6 build 4:

 

$customadminpath = '.billadmin';

 

but when login in into admin area (https://www.********.us/.billadmin/):

 

Language Folder Not Found

 

In 5.2.5 this configuration works well

 

 

PS: without "." (admin area https://www.********.us/billadmin/) and

 

$customadminpath = 'billadmin';

 

works well

 

 

It's not a bug. It's designed this way. Having a period in your folder name allows for directory traversal, a security vector.

Link to comment
Share on other sites

It's not a bug. It's designed this way. Having a period in your folder name allows for directory traversal, a security vector.

 

Folder name starting with a dot is a hidden folder (the other side of security vector:)).

Link to comment
Share on other sites

a period prepending a directory or filename hides the directory from index view on linux systems. Quite as to why it breaks the system on whmcs I really couldn't say but i see no good reason to hide the admin directory anyway as it is located in a directory which contains index.php which is shown instead of the directory listing.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use & Guidelines and understand your posts will initially be pre-moderated