Folders owned by a different owner?

[isdoo]

Am seeing this error in 7.1

 

The following directories are owned by a different user from that which is executing WHMCS. This indicates a potentially insecure configuration:

 

• /home/account/public_html//downloads
  
• /home/account/public_html/templates_c
  
• /home/account/public_html/attachments
  
• /home/account/public_html/crons
  

However the owner is the same as the other files/folders?

 

Any thoughts?

[bear]

Am seeing this error in 7.1

The following directories are owned by a different user from that which is executing WHMCS. This indicates a potentially insecure configuration:

/home/account/public_html//downloads

/home/account/public_html/templates_c

/home/account/public_html/attachments

/home/account/public_html/crons

The location of those directories is actually a cause for concern as well. They really should not be publicly accessible.

[isdoo]

i guess they are not - but this new version has a few warnings.

 

Sadly the page is very unhelpful just saying refer to our documentation. No link, no nothing.

 

Apparently I also have 'Your system is set to display errors'

[Radsy!]

you need to move them outside of the public HTML so they're not accessible to anyone

 

it'll probably help you navigate on how to correct it

http://docs.whmcs.com/Further_Security_Steps#Secure_the_Writeable_Directories

[cakewalk]

Hello,

Sorry to dig up an old post and too some what hijack it but I did so with the intentions to help others with is issue.

I found this when doing some googling some what about the same issue but in my case the location was in the public domain / accessible ( /home/username/whmcsdata ) but I was still getting the "The following directories are owned by a different user" error.

I added two lines to my config file an fixed the issue.

$whmcspath = '/home/username/public_html/whmcs/';

$crons_dir = '/home/username/whmcs_crons/';

https://docs.whmcs.com/Further_Security_Steps#Secure_the_Writeable_Directories