Errors in log after upgrade

mehargags

I recently upgraded a 6-7 years old OS Ticket install to version v1.14.1 Released November 21, 2019 so as to run it on PHP to v7.3.

Everything seems fine...however I see this nasty "warning" in log every few seconds and the apache log grows to about 500MB per day.

PHP Warning: file_exists(): open_basedir restriction in effect. File(/) is not within the allowed path(s): (/home/acaws.georgiatc.com:/home/admin/tmp) in /home/acaws.georgiatc.com/public_html/include/mpdf/vendor/mpdf/mpdf/src/Cache.php on line 26, referer: https://xxxx/scp/tickets.php?id=17227

so as the error suggests... something is trying to access in"/" which obviously is not alllowed in my basedir settings. I see in the in /include/ost-config.php root path setting which is commented, should i just set it as below:

define('ROOT_PATH', '/home/acaws.georgiatc.com/public_html/');
which is the absolute path of my site root ?

I'm a sysadmin and not a dev... so if someone can point me how to clear up this dreaded warning from occurring in the log.

Many thanks

salewski

this is simple .. 🙂

you can disable open_basedir = none in the PHP.ini.

if not working ... you need to mod the correct php.ini... 😉

you can show how you can find the correct php.ini

https://mediatemple.net/community/products/dv/204643880/how-can-i-create-a-phpinfo.php-page

mehargags

Thats not the solution, infact what you suggest opens security holes. Basedir restriction is mandatory when running mod_PHP.

The warning is because the app is trying to access/write to "/" which obviously is a flaw so defining absolute site root should fix this. Shall wait for comments from Devs

ntozier

osTicket only accesses the osTicket file structure and the PHP temp directory. So perhaps your php.ini has your temp dir set to /. You should check your php.ini.