Dependency Graph
View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0036882 | mantisbt | administration | public | 2026-02-11 11:54 | 2026-03-11 17:55 |
| Reporter | raspopov | Assigned To | atrol | ||
| Priority | normal | Severity | minor | Reproducibility | always |
| Status | closed | Resolution | duplicate | ||
| Product Version | 2.28.0 | ||||
| Summary | 0036882: Recommendations for safe installation paths for MantisBT are not possible | ||||
| Description | MantisBT fails to follow its own path security guidelines ("Paths") in If you set the It appears that the MantisBT codebase has been modified for some time without taking this recommendation into account. | ||||
| Tags | No tags attached. | ||||
| duplicate of | 0021584 | confirmed | core_path directory can't be moved outside the web root |
List of problematic files:/core.php:69:
The "/core" folder is located in a different location. Probably can be replaced with: /core/email_api.php:79:
/core/email_api.php:1580:
/classes/EmailSender.class.php:18:
/classes/EmailSenderPhpMailer.class.php:23:
The "/classes" folder is no longer available. These lines can simply be removed, since the class autoloader is used anyway. /core/logging_api.php:325:
The "/core" folder is located in a different root folder. We probably need to use the /core/commands/IssueViewPageCommand.php:36:And 12 files next to it. The "/core" folder is not located next to "/api".
Replace with:
/admin/check/check_paths_inc.php:73:MantisBT thinks that the "/mantisbt-config" folder is inside the "/mantisbt" folder.
Needs to be replaced with: |
|
|
Please add any findings to 0021584 |
|
|
@atrol Thanks for pointing out the issue about this problem. I actually searched for it using the keyword "admin/check/index.php,". But that report listed the old URL "/admin/check.php." |
|
related to
child of
duplicate of