Chamilo, new course, error about group permissions

by 27 Comments

There is a common problem appearing when installing a new Chamilo portal that I have seen a lot recently, so I thought I’d share the details here.

The problem

When installing Chamilo on a cPanel-kind-of-hosting, it might happen that you complete the installation, but when you want to enter a newly-created course, an ugly error appears. Something of the likes of:

Internal Server Error

or, if you are lucky

/…/courses/COURSECODE/index.php cannot be displayed because it is writable by the group.

Either way, those two error message precisely when the URL of your browser shows http://your-domain-name/courses/YOURCOURSECODE/index.php mean that you have a “secured” version of Linux.

This implies that for any PHP script that you want to execute, this message will appear if the script is writable by any other user than the owner of the file.

In a cPanel system, you will see that this file (and possibly the directory it’s in) have write permissions for the group.

The permissions syntax

I’m reviewing basic stuff here, so if you know about UNIX permissions or just don’t want to know, just skip to the next section.

This is represented by the permissions indicator

-rwxrwxr–

which can be translated as: the owner can read, write and execute this script, the owner *group* can read, write and execute this script, and all other users can read the script, but not write or execute it.

The write permission gives you the right to edit the file, but you need a write permission on the containing *folder* to actually create or remove this file.

Anyway, so the risk is that, by letting too many people access this script, it could be used (and modified) by a cracker (an evil hacker) to execute his code instead of yours on your server.

Fixing the problem now on the server

Now the quick fix is to read carefully the error message and change the permissions accordingly. The server tells us that this script cannot be opened because it is writable by the group. So all we need to do is remove the write permission on this file. Just click on whatever option allows you to change the permissions on that cPanel and remove the write permission for the group.

This should result in your file’s new permissions to look like this:

-rwxr–r–

If the server bothers you with write permissions about the directory, you need to set the directory’s permissions to

- rwxr-xr-x

Execution permissions are needed to read inside this directory (and get to index.php).

This should solve your problem for this course. Now you want to avoid doing that for all courses to come, don’t you? Read on…

Fixing the problem for the future from inside Chamilo

Since Dokeos 1.8.4 (or a little before that), we added a few settings inside the database that lets you mention what type of permissions you want new files and directories to use. Well, this is precisely one case for which we did that.

You want to head towards your “Portal Administration” tab, “Platform” section, “Configuration settings” link, then “Security”, then the “Permissions for new directories” and “Permissions for new files” settings. By default, these are set to 0777 and 0666. Considering you want the groups not to have write permissions, and considering 0777 is representing rwxrwxrwx and 0666 is representing rw-rw-rw-, you just want to change these to 0555 and 0444 respectively.

That’s it, you can now create a new course without having to worry about files permissions!

It's only fair to share...Share on FacebookShare on Google+Tweet about this on TwitterShare on LinkedInShare on TumblrEmail this to someone

27 Comments

  1. Thanks for your solution, it worked, as I had the same problem, I´m working with Dokeos V 1.6.5, and doesn´t have the security option than allow to set the kind of permissions desired for files, but by mean of the CPANEL I did it.
    Regards.

  4. i’m sory but this no functionning…
    I have always :
    Forbidden
    You don’t have permission to access /courses/BOB/ on this server.

    ——————————————————————————–

    Apache/2.2.3 (Red Hat) Server at mysite Port 80

    • Hi Wfirefox,

      I’m probably even more sorry. I’m trying the best I can to help you all but there are loads of hidden reasons why this could not work, depending on your specific configuration. This being said, there are about 7000 reported installations of Dokeos which work, so I can’t imagine we’re doing it completely wrong.
      Please consider having a professional look up at your server configuration and give you a hand.

  5. Hi !

    Thanks for your post.

    I had that 500 error problem, and when I changed that, it was ok.

    But now I have the folloing message:
    “Not Found
    The requested URL /courses/PESD/index.php was not found on this server.

    Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.”

    Can you help me now ?

    • Hi Pedro,
      Maybe that comes from the first time you created the course and the error happened. Does it happen when you create a *new* course now? If not, then you have fixed the problem and should just remove the PESD course from the courses list in the admin section.

  7. PS:

    The error is slightly different….

    It just says:

    “Index of /courses/TESTE05

    Parent Directory”

    It’s not an error… but it did not create any new index.php file in thge new directory…

    Any hint ?

    Thnaks !

    PFS.

  8. Seems to me that it is possible to create the directory but not the file… Try to manually create an index.php file in there that contains this:

    <?php
    $cidReq = “TESTE05″;
    $dbname = “TESTE05″;
    include(“../../main/course_home/course_home.php”);
    ?>

    And then try to enter the course again. It is very likely that the permissions on the courses/ directory were first wrong and then you changed that, but in the meantime you changed the permissions in the security settings of Dokeos/Chamilo to something else than 0777 and now you can create the directory but you cannot create anything inside it :-)

  10. changing “Permissions for new directories” to 0755 worked for me, 0555 did not, I guess it really depends on the hosting provider…

  11. hi to you, all Chamilo fans,

    I had a similar problem, but solved it in another way. after reading your post, I tried to change, by trial and error, the file and directories permissions, with many combinations, with no success.
    but first a little info: Chamilo 1.8.8.2 installed on Bluehost with SimpleScrips, on a directory of lucadezmir.com (initial address: lucadezmir.com/cursuri).
    on lucadezmir.com is a WordPress instalation. when I tried to open a new course (after making it), it gave me 404 error FROM THE WORDPRESS instalation.
    the fix: made another subdomain: cursuri.lucadezmir.com, installed Chamilo, made a course, tried to open it, got a 500 type error but, interesting, at the end of the error was a nice word: “FIXED.” reloaded the page and…bang…I had access to the course.
    I tried to fix the problem for two days, got help from a friend. kudos for the fix goes to Razvan
    now I am going to start the long and nice process of building the campus :)

    all best to you,
    Luca

  12. Thank you very much, but for my system I need have to set 0755 and 0644 to dir and files respectively and it works for me, but… when I delete any Course from admin, the permissions return to the original configuration :(

  15. I have a problem with chamilo.

    I generated the course well.
    I keep it in app / courses

    But when I click on Course “TEST” for example, suggests me http://www.test.com/courses/TEST/index.php and displays the error: “The requested URL was not found /courses2/TEST/index.php on this server.

    Summary:
    – I believe the course apparently well.
    – Do not believe index.php
    – Aim to another directory. the course is created in app / courses but to click points to / courses

    No solution has been me permission useful.

    Any ideas?

    • Hi. Please read the installation guide more carefully. Your web server is not interpreting the .htaccess file with redirect rules (I’m guessing you’re using Chamilo 1.10 as you mention the app/ folder). Make sure your Apache’s Rewrite module is enabled (sudo a2enmod rewrite) and that you have the “AllowOverride All” setting present somewhere in a Directory tag for your virtualhost.

Leave a Reply

Your email address will not be published. Required fields are marked *