3

After some brief difficulty upgrading from Civi 4.6.x to 4.7.0, we managed to get it done, with one small hiccup. Post-installation, we got a notification saying:

File 'Array' presents a security risk and should be deleted.

I looked in our CiviCRM directory, and found 2 files called "Array.php" I tried temporarily relocating both of those files, but no luck; the error still displayed. Any leads as to how to resolve this issue would help--it makes me uncomfortable to have the system status as "Critical."

Thanks!

Improve this question
1
  • Me too. Upgrade ran through flawlessly, but the System status page shows the error described here. Joomla 3.4.8, CiviCRM
    – Jern
    Jan 30, 2016 at 7:45

1 Answer 1

Reset to default
6

CiviCRM is not warning you about a file named Array.php, the confusing error message is because it's rendering a PHP array to a text string.

I've opened an issue in JIRA about this and submitted a suggested quick fix:

CRM-17909: File 'Array' presents a security risk and should be deleted.

It looks like the fix is as simple as adding [0] as shown in this Github commit.

If you can test the fix from that issue on your site, and confirm that the error message shows a more helpful result when you've done so, that will help us get the fix into the next 4.7.x release.

Improve this answer
1
  • The files reported after the fix in Joomla are /administrator/components/com_civicrm/packages/dompdf/dompdf.php and /administrator/components/com_civicrm/packages/html2text/class.html2text.inc. Removing them cleared the warnings.
    – isherwood
    Jan 31, 2016 at 3:31

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.