View Issue Detail

ID	Project	Category	Submitted / Last Updated
01846	UserSpice	Misc	2023-05-27 15:38:03 / 2023-07-22 05:58:18
Reported	Tekniskedirektorn	Assigned To	Unassigned
Priority	none	Reported	5.5.7
Status	closed fixed	Resolution Version and Commit	5.6.1
Summary	Userspice - SpiceShaker - Nginx
Description	Spiceshaker checks if users/parsers/ is writable by checking with the .htaccess-file like below in _spice_shaker.php in views/ if (!is_writable($abs_us_root . $us_url_root . 'users/parsers/.htaccess')) { Nginx does not normally work/care about .htaccess-files and is most often blocked in settings so you don't accidentally reveal sensitive data copied from Apache-servers. In this case it means that on Nginx the Spice Shaker wrongly tells you that it cant write to parsers-folder if you have removed the .htaccess files that Nginx cant use. Suggestion: just check that the folder parsers/ is_writeable because on line 143 you are checking if temp.zip can be written to anyways. Larger scope: Check if Userspice has more .htaccess functions and remove them to play more nicely with Nginx

June 2023

The other times we use .htaccess it is more of a convenience to deal with misconfigured servers. They're not doing anything mission critical. If someone has file listing turned on, that's a server config issue. .htaccess is a nice bonus, but not mission critical.