Hello.<br><br>I watch in file '<vtiger>/include/utils/CommonUtils.php' the function: function <br><br>checkFileAccessForInclusion($filepath)<br><br>And the conditional that kills the proccess is:<br><br>if (stripos($realfilepath, $rootdirpath) !== 0 || in_array($filePathParts[0], $unsafeDirectories)) {<br>
die("Sorry! Attempt to access restricted file.");<br> }<br><br>i test both functions in the conditional, the function stripos($realfilepath, $rootdirpath) is different that 0, so, it only happens in new module made with vtlib.<br>
<br>I don't know if that works, or my search is usesless.<br><br>So, what is the best way to make a new module in vtiger 5.4?<br><br>Thanks a lot for your patience.<br><br><br><div class="gmail_quote">2012/8/21 Juan Pablo Botero <span dir="ltr"><<a href="mailto:juanpabloboterolopez@gmail.com" target="_blank">juanpabloboterolopez@gmail.com</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi, thank you so Much.<br><br><div class="gmail_quote"><div class="im">2012/8/21 Adam Heinz <span dir="ltr"><<a href="mailto:amh@metricwise.net" target="_blank">amh@metricwise.net</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>On Tue, Aug 21, 2012 at 4:16 AM, Alan Lord <<a href="mailto:alanslists@gmail.com" target="_blank">alanslists@gmail.com</a>> wrote:<br>
> If this is the case, take a look at include/utils/CommonUtils.php and<br>
> check the functions like:<br>
><br>
> checkFileAccess($filepath)<br></div></blockquote></div><div> <br>i have that function with sentence:<br><br>die("Sorry! Attempt to access restricted file. <br />Filepath: " . $realfilepath. "<br /> Rootdirpath:" . $rootdirpath);<br>
<br>And doesn't print any path.<br> </div><div class="im"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>
> checkFileAccessForInclusion($filepath)<br>
<br>
</div>Put a debug_print_backtrace() call before each die statement in those<br>
two functions to shine some light.<br></blockquote></div><div><br>I added before the two die statement, i think is more comfortable that i attach a document with the output.<br><br>Thanks.<br> </div><div><br><br> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
_______________________________________________<br>
<a href="http://www.vtiger.com/" target="_blank">http://www.vtiger.com/</a><br>
</blockquote></div><div class="HOEnZb"><div class="h5"><br><br clear="all"><br>-- <br>Cordialmente:<br>Juan Pablo Botero<br>Administrador de Sistemas informáticos<br>Fedora Ambassador for Colombia<div><a href="http://www.jpilldev.net" target="_blank">http://www.jpilldev.net</a><br>
</div><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>Cordialmente:<br>Juan Pablo Botero<br>Administrador de Sistemas informáticos<br>Fedora Ambassador for Colombia<div><a href="http://www.jpilldev.net" target="_blank">http://www.jpilldev.net</a><br>
</div><br>