News:

Support the VirtueMart project and become a member

Main Menu

Warning message Safe path

Started by Dosadon, April 10, 2012, 13:55:51 PM

Previous topic - Next topic

curtisvision

Thanks! I got virtuemart to recognize a safe path that i put into the templates section. I actually created the path from the error message that I was getting on the front end. Example: /home/content/37/3871037/html/includes/      But... the front end still has the error message that has my website completely locked down.

Should there be a version.php or a framework.php file generated within the html folder I created for the safe path?


Warning: require(/home/content/37/3871037/html/includes/version.php) [function.require]: failed to open stream: No such file or directory in /home/content/37/3871037/html/includes/framework.php on line 41

Fatal error: require() [function.require]: Failed opening required '/home/content/37/3871037/html/includes/version.php' (include_path='.:/usr/local/php5/lib/php') in /home/content/37/3871037/html/includes/framework.php on line 41

[attachment cleanup by admin]

curtisvision

correction should there be a .php file within the includes folder not the html folder?    same question as prior post but wanted to clarify my question since I used the wrong folder name.

thanks!

Milbo

Should I fix your bug, please support the VirtueMart project and become a member
______________________________________
Extensions approved by the core team: http://extensions.virtuemart.net/

ajmusic24

Xpozay was on point with his message he submitted below.  Thanks Xpozay!

Quote from: xpozay on April 22, 2012, 03:34:17 AM
While all the technical solutions are correct, I do believe the bigger issue is much simpler.  What are we meant to do?

For me, I know my administrator path through Cpanel (and also VM nicely tells us - when it is blank). 

I read this thread a few times and the other linked thread and still had no idea what to do.  So I did the natural thing to do and ignored it and proceeded to play with VM.  I noticed that message was still there at the top of VM and immediately concluded that there must be a configuration field for this somewhere.  Once I found the setting under templates, entered the safe path /home/adminname/vmfiles (I created vmfiles using cpanel) and problem solved.

My suggestion to the VM guys is to change your message during installation to say where to fix the problem.  Ie go to configuration/templates because when we see this message during installation it implies that I have an installation problem and not a configuration problem.

Perhaps something like this ....

Warning, the Safe path is empty.  For safety reasons it is very important to create a folder, not accessible by an URL, to store secure VM data such as invoices.  Our suggested path is xxxxxxxxxxxxxxxxxxxx.  Once you have finished the installation, please visit the Virtuemart configuration under Configuration/Templates/Media File Settings/Safe Path to enter your file path.

Where xxxxxxxxxxxxxxxxxx   is /home2/MY Domain path/public_html/vmfiles or whatever for that sever.

finbarr69

Totally agree - the instructions need to be clear.  Also, I installed the latest version 2.0.6 today, and it still says to go and create the folder and suggests also to create a folder called invoices inside the vmfiles folder - still no mention of how to set the safe path.  I created the suggested folder and the invoices folder within, then went to Configuration -> templates to configure the path.  When I saved it, it said there was an infinite loop detected and it was unable to create the invoices folder and to do it manually.

Methinks the instructions need to be corrected as per your suggestion, but also to remove the bit about creating the invoices folder as it will be done automatically anyway.

Warmest Regards,

Brian

Quote from: xpozay on April 22, 2012, 03:34:17 AM

My suggestion to the VM guys is to change your message during installation to say where to fix the problem.  Ie go to configuration/templates because when we see this message during installation it implies that I have an installation problem and not a configuration problem.

Perhaps something like this ....

Warning, the Safe path is empty.  For safety reasons it is very important to create a folder, not accessible by an URL, to store secure VM data such as invoices.  Our suggested path is xxxxxxxxxxxxxxxxxxxx.  Once you have finished the installation, please visit the Virtuemart configuration under Configuration/Templates/Media File Settings/Safe Path to enter your file path.

Where xxxxxxxxxxxxxxxxxx   is /home2/MY Domain path/public_html/vmfiles or whatever for that sever.




finbarr69

Also noticed that the message about infinite loop detected and unable to create the invoices folder appears every time I save the configuration.  I found out this was because there was no / at the end of the safe path (although the message for the suggested safe path does not include a / at the end).

Surely if any path needs a / at the end, virtuemart should silently add it !

Brian

mascafe

Hi,
One of my sites is using Plesk. I created the 'vmfiles' folder out the  path accesible by URL but Virtuemart was still showing the warning.
I was looking for a solution and finally I noticed that the folder was not accesible due to the open_basedir php directive. You have to add the full path of 'vmfiles' folder to it to make it work.
I hope this is helpful for someone.
Regards

gldproducts

Quote from: curtisvision on May 18, 2012, 18:08:33 PM
Milbo!  Thanks!  For the record... I HATE GODADDY! They have done nothing but create major problems for me and their support is crap! I appreciate your help and your thoughts on why this is happening is not surprising since it seems that every time I have a problem Godaddy is the problem. They have caused me to lose weeks in website production. For anyone reading this do not use Godaddy!

Do you have any suggestions on a knowledgable webservice provider that has experience with joomla and virtuemart?

curtis, I have had the exact opposite experience with Godaddy. I have installed several dozen sites using all sorts of Joomla versions, even Mambo back in the day. Did you install Joomla yourself, or use Godaddy's wizard? I'd recommend doing it yourself, after you set up the databases of course. Anyway, glad to have support forums around.

Milbo

Quote from: finbarr69 on June 28, 2012, 12:00:11 PM
Surely if any path needs a / at the end, virtuemart should silently add it !
is done in 2.0.8
Should I fix your bug, please support the VirtueMart project and become a member
______________________________________
Extensions approved by the core team: http://extensions.virtuemart.net/

Quiiger

Hi,

I've got this to work today it's quite easy when you know what to do, so ill try to explain:
First of all you need to use a ftp program if aren't already ( I use Filezilla)
Create a new folder on your deskop called vmfiles and upload it on your website (not in any other folder)
so in the same directory you should have administrator, image ect...

Now go to CPanel/media manager copy the directory to your image folder
for example my was:

/customers/8/2/8/domain/httpd.www/images

Copy and exchange images for vmfiles

now it's supposed to look like this

/customers/8/2/8/domain/httpd.www/vmfiles

cope the link into configuration/templates/Safe Path.

I hope I could help! :)

Milbo

This is wrong and now everyone can access the path,

the correct path would be here /customers/8/2/8/domain/vmfiles, not within the httpd.www.
Should I fix your bug, please support the VirtueMart project and become a member
______________________________________
Extensions approved by the core team: http://extensions.virtuemart.net/

finbarr69

I found out today, another reason for this error (when you have the correct path already set) is if your open_basedir php setting does not allow you access to your safe path folder.  Add your path  (for example /home/content/37/3871037/vmfiles ) after a colon at the end of your open_basedir path, either in your php.ini file or in Plesk if you use it.

Eg, your open_basedir path might be:

/home/content/37/3871037/httpdocs/:/tmp/

You would make it:

/home/content/37/3871037/httpdocs/:/tmp/:/home/content/37/3871037/vmfiles

Hope that helps someone



Quote from: curtisvision on May 16, 2012, 21:40:58 PM
this is the error message i get?
Warning, the Safe Path is WRONG, for safety reasons it is very important to create a folder in a path not accessible by an URL, create also a folder invoices in it to store your sensible data secure. Our suggested path is for your system /home/content/37/3871037/vmfiles

Kati

Hi everyone!

I´m writing this down, because there might be others who are not as skilled as you. I feel I´m not  :) And because of that I don´t want "to think too difficult" (sorry my bad english).

1. True, the path is missing. It needs to be done.
2. Copy your servers path for example from your Filezilla.
3. Put the path into Virtue Marts Safe Path at the "Templates" tab (virtue Marts is pointing the path to you).

This is all the information needed, this I didn´t get clearly from all of these responds in here.

Images below....

- Kati

[attachment cleanup by admin]

guybr

my input:

One problem users may be facing is that the suggest safe path includes "/html/" directory in it - but the VM tutorial recommends removing it (http://docs.virtuemart.net/faqs/37-configuration/110-how-to-set-the-safe-path.html).

In my case, when I originally followed their instructions, I did create the /vmfiles/ directory in the root menu - but after ongoing error messages, discovered that the correct address requires including the "/html/" segment that the tutorial suggested removing...

GJC Web Design

The "suggested path" is just a suggestion and can't be accurate for all server setups and folder structures.

It is calculated by going one back from your Joomla install - if your Joomla is in a subfolder on the server then it will be wrong.

Just simply look at the "Path to Temp Folder" in your Joomla admin ->Global Config->Server

You need your Safe Path just above your public folder - can be called public_html, www, web etc

They test is if you put your safe path in a browser /http://www.mysite.com/mysafefolder and can see it - its wrong!
GJC Web Design
VirtueMart and Joomla Developers - php developers https://www.gjcwebdesign.com
VM4 AusPost Shipping Plugin - e-go Shipping Plugin - VM4 Postcode Shipping Plugin - Radius Shipping Plugin - VM4 NZ Post Shipping Plugin - AusPost Estimator
Samport Payment Plugin - EcomMerchant Payment Plugin - ccBill payment Plugin
VM2 Product Lock Extension - VM2 Preconfig Adresses Extension - TaxCloud USA Taxes Plugin - Virtuemart  Product Review Component
https://extensions.joomla.org/profile/profile/details/67210
Contact for any VirtueMart or Joomla development & customisation