Item10192: Plainfile logger writes to foswiki/bin when it has problems.

and thus far, its having these problems on windows with strawberry perl.

writing (or attempting to) data / logs to the cgi-bin is pretty bad.

-- SvenDowideit - 26 Dec 2010

Agree this is bad. I do not know of a detailed attack vector for this but my imagination tells me that potentially a plain bug in a setup could open up a windows the admin would rather see closed and hatched.

Are you fixing Sven?

-- KennethLavrsen - 06 Jan 2011

See also Support.Question749 for issues with the logs being written to the wrong location. But on Red hat, not windows.

-- GeorgeClark - 06 Jan 2011

I am downgrading this to normal. If a core developer raises an urgent bug and leaves it ignorred for two months then it cannot be urgent.

-- KennethLavrsen - 06 Mar 2011

Deferring to 1.2. We need a test case that shows exactly how to recreate the problem. I've been unable to recreate.

-- GeorgeClark - 11 Apr 2012

I've installed 1.1.3-beta1 on Windows XP w/ Apache 2.2 and Strawberry Perl 5.10.0. I'm not seeing any hint of writing to the bin directory. If the working/logs directory is moved out, then foswiki fails with 500 internal error. No files written to bin however.

There were several fixes to Logging in 1.1.3 - is this still an issue?

-- GeorgeClark - 13 Mar 2011

Deferring to 1.1.5, or please close if this is no longer an issue.

-- GeorgeClark - 23 Nov 2011

Closing. No feedback since 1.1.5. Bootstrap code in 1.2 will completely change the way we do path guessing, so even if this is still lurking, it's probably fixed in 1.2

-- GeorgeClark - 23 Dec 2014

Commenting is disabled while not logged in