11 June 2011, 7:33

I need help,

my new installation Mahara version 1.3.6 on debian lenny hangs on any export:

ERRORLOG:

[Fri Jun 10 21:46:03 2011] [error] [client 83.78.112.18] [WAR] c1 (export/html/lib.php:246) Failed to zip the export file, referer: http://mahara.xxx.com/mahara/export/

[Fri Jun 10 21:46:03 2011] [error] [client 83.78.112.18] Call stack (most recent first):, referer: http://mahara.xxx.com/mahara/export/

[Fri Jun 10 21:46:03 2011] [error] [client 83.78.112.18] * PluginExportHtml->export() at /var/www/domains/mahara.moodleswiss.com/136/export/download.php:102, referer: http://mahara.xxx.com/mahara/export/

[Fri Jun 10 21:46:03 2011] [error] [client 83.78.112.18] , referer: http://mahara.xxx.com/mahara/export/

11 June 2011, 21:25

Hi Martin,

Have you got the "zip" and "unzip" utilities installed on your server? (apt-get install zip unzip)

Cheers,

Francois

12 June 2011, 3:26

Hi Francois

I have found "zip" and "unzip" in the Path: usr/bin/

i dit the Path in the config.php

$cfg->pathtounzip = '/usr/bin/';
$cfg->pathtozip   = '/usr/bin/';

Cheers

Martin

12 June 2011, 18:52

These ones should be:

  $cfg->pathtounzip = '/usr/bin/unzip';
  $cfg->pathtozip   = '/usr/bin/zip';

(it's the path + the filename)

14 June 2011, 4:58

Ok - all is fine now in export.

There is an other problem, i miss the menu "import"?

Martin

14 June 2011, 5:59

Hi Martin,

there is no "import" menu

You will find the area to import a Leap2a File in the admin->user area

HTH Heinz

14 June 2011, 6:39

Hi Heinz

tanks for help.

Martin

30 August 2011, 14:39

Hi all,

on a plesk-controlled ubuntu I couldn't get the "pathtozip" and -unzip working for mahara 1.4 (perhaps I should have changed permissions in /usr/bin/).

Instead I copied unzip and zip to maharadata-folder and changed owner an rights of both binaries to "www-data'. That solved all problems with im- and export. Might this lead to security problems?

.htaccess of maharadata-folder is set to
deny from all
AllowOverride None

thanks for your hints

Norbert

31 August 2011, 20:42

The problem with having unzip and zip in your maharadata folder is that Mahara can write to that folder. Which means that a bug in Mahara could in theory allow an attacker to overwrite these files and then execute arbitrary code on your server the next time someone exports a portfolio.

Unfortunately I don't know enough about your environment to offer suggestions on how to improve this.

Cheers,

Francois

08 September 2011, 3:16

Hi Francois

such a bug in Mahara would enable more possibilities than just corrupt my zip or unzip.

With $cfg->pathtozip = it is possible to rename zip and unzip

f.e. $cfg->pathtozip = '/yourpath/renamedzip'

so it's not so easy to find...

My ubuntu-plesk-combination has by default no zip in standardpath /usr/bin and isn't accessable for the webserver in the plesk configured location - might be for security-reasons - I don't know and I can't find any hint for that.

 thanks

Norbert