Support

RS Firewall gave me an alert when I run the System Check.

Is it something I can resolve ? And how ?

Thank you very much !

This is Nicholas' reply from another ticket:

If you look at the code you will see that such a directory is created ONLY when you have misconfigured Joomla's temp-directory (in Global Configuration). Even in this case the generated directory is given a .htaccess folder which FORBIDS the execution of any .php files AND it's removed when the archive transfer is complete.



Please remember our credentials. I actually make a very good security software called Admin Tools (direct competitor to RSFirewall), I've written the update component used by Joomla! Itself and have been a major contributor to the Joomla! Security Strike Team. The last two major zero day Joomla! security issues in October and December were fixed by me and the other developer of our company, Davide. We know security very well and do not expose your site to unnecessary risk.

Thank you,

What is a good Joomla's temp-directory configuration? Do you have an example or documentation about it?

I already bought and use admin tool pro and I'm a big fan of your work. I have an old reflex to make the system check with RS Firewall. I don't know why. I will put some time to learn more on how to use Admin tool.

A tmp folder in the root of your site works just fine. The tricky part is that the path that you enter in Global Configuration has to be from the root of the server. So /tmp points to the server's tmp folder. That is usually an invalid location for you because you can't write to it. Even if you can, some servers periodically purge that folder which can cause random havoc with your site.

You can take a look at the Output Folder setting in Akeeba Backup's Configuration screen. If you are using the default location for your backups, it will give you the path to the root. Just cut off /administrator/components/com_akeeba/backups and replace it with /tmp at the end of the string.

Paranoia is a good thing with backups and security. :-)

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.