One of my websites, which uses Joomla as CMS got hacked as I had not paid attention to securing the site properly. After this I did go through the site carefully trying to remove any possible loopholes.
Recently I realized that Uploading images through Media Manager or any other means were failing to upload. I tried various things but nothing was helping. I am listing some of them here:
1. Checking the Directory permissions. Even tried changing the unsafe mode of 777 to all the relevant directory. Did not help.
2. Tried disabling Flash based uploader – did not help.
What it did was to give an error message of following kind:
JFile::read: Unable to open file: ”
Warning: Failed to move file!
Error. Unable to upload file.
3. I followed up on this and eventually found that If I do not use the “open_basedir” feature in php.ini to make it more secure by commenting it out in php,ini file, it works fine.
;open_basedir = /home/www
4. As of now, I do not understand why this happened and would like to understand if I can still use this feature to keep site safer.
Author: Prabhat Ranjan
Prof. Prabhat Ranjan is Vice Chancellor, D Y Patil International University, Akurdi, Pune. He was heading India's Technology Think Tank, TIFAC(tifac.org.in) as its Executive Director since April 2013 to April 2018. Earlier he was Professor at Dhirubhai Ambani Institute for Information and Communication Technology, Gandhinagar (DA-IICT) since 2002. He was educated in Netarhat School(near Ranchi), IIT Kharagpur and Delhi University. He received his Ph D from University of California, Berkeley where he carried our research on “Nuclear Fusion” at Lawrence Berkeley Laboratory during 1983-86. He immediately returned to India after this and carried out research in Nuclear Fusion area at Saha Institute of Nuclear Physics, Calcutta and Institute for Plasma Research(IPR), Gandhinagar. He played a major role in India’s Nuclear Fusion program and was Project Leader of the largest operational Indian Fusion Reactor, ADITYA, at Institute for Plasma Research from 1996-2002.
His current interests include applications of Wireless Sensor Network to Wildlife, Planetary Exploration (Chandrayaan mission), Nuclear Fusion, Healthcare, Agriculture etc. He has received National Science Talent Search Award, IBM Faculty Innovation Grant and HP Innovate 2009 award, NPEDP-Mphasis Universal Design Award 2012, Bihar Gaurav Samman 2012 etc.
View all posts by Prabhat Ranjan