On Mon, Mar 26, 2012 at 3:57 PM, Robert James Clay <[email protected]> wrote: > On Sun, 2012-03-11 at 22:25 -0400, Chris Travers wrote: >> On Sun, Mar 11, 2012 at 7:17 PM, Robert James Clay <[email protected]> wrote: > >> > The package is installing most everything to /usr/share/ledgersmb, except: >> > The css directory is going to /var/lib/ledgersmb/css, & the templates >> > directory is going to /etc/ledgersmb .... > >> I think you will trigger directory transversal checks in this case, >> but at least it tells us what the problem is. > > I've created a test build of 1.3.14 rc2. No particular issue with > the package build or with the package upgrade on the test system I'm > running. I'm still, however, seeing the "Directory transversal not > allowed" error message when, for instance attempting to go to 'System| > HTML Templates|Income Statement|en_US'. This is what shows up for that > "en_US" link: > -------------------------------------------------------------------------- > http://lsmbtst/ledgersmb/am.pl?action=display_form&file=/etc/ledgersmb/templates/demo/en_US/income_statement.html&path=bin/mozilla&login=admin&sessionid=&code=en_US&callback=am.pl%3faction%3dlist_templates%26direction%3dDESC%26oldsort%3dcode%26file%3dincome_statement.html%26path%3dbin%2fmozilla%26login%3dadmin%26sessionid%3d
What is the templates directive set to in ledgersmb.conf? This way I can do some testing. Best Wishes, Chris Travers > -------------------------------------------------------------------------- > > I noticed that there is no actual "en_US" directory, so tried the > same kind of thing except for using "en" but ended up with the same > error. Tried changes to the directory configuration (LedgerSMB, > Apaache, & file system) but that didn't seem to have changed anything... > > >> Please file a bug for this one too. > > Unless one of you say not to do so, I figure to open up a new bug > for this after I have a chance to do more testing. (And perhaps see if > it's still there using a 1.3.14 release installation, including a > 'standard' install...) > > > > Jame > > > > ------------------------------------------------------------------------------ > This SF email is sponsosred by: > Try Windows Azure free for 90 days Click Here > http://p.sf.net/sfu/sfd2d-msazure > _______________________________________________ > Ledger-smb-devel mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/ledger-smb-devel ------------------------------------------------------------------------------ This SF email is sponsosred by: Try Windows Azure free for 90 days Click Here http://p.sf.net/sfu/sfd2d-msazure _______________________________________________ Ledger-smb-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/ledger-smb-devel
