Unable to install TYPOlight

[tmikk]

I am trying to install TYPOlight, but not doing so well. I use an Ubuntu server v. 9.10. The web based install tool said that I have to use the "Safe Mode Hack" which I did. However the install tool does not get me past changing the password screen. There is no error.

When I run the system configuration check, it displays several errors and says that I will mostly likely need to run the "Safe Mode Hack". I have root privileges to the server. I would like to fix these errors and not run the TYPOlight with the hack. What do I need to do to the server to have the file ownership and permissions set correctly?

Thank you,
Tonu

[Ben]

What happens when you try to change the password? Do you get a blank screen or just the same page? Here are some FAQ's you should look into:

http://www.typolight.org/faq-reader/ite ... creen.html
http://www.typolight.org/faq-reader/ite ... light.html

[tmikk]

Thanks Ben, for your reply. I was able to use the install tool after making it editable by web user (www-data) on my case. I was able to get the basic site up and running. However, I then ran the TYPOlight System Check and noticed several warnings related to file permissions as well as a note indicating that I need to run the Safe Mode Hack.

My main question is how do I install TYPOlight on a server that I have complete control over? I have not seen a good tutorial on it. I am confused by the need to run Safe Mode Hack as well as what file permissions and ownership I need to have on TYPOlight files. Any pointers would be greatly appreciated.

Thank you!

Tonu

[tmikk]

I reinstalled TYPOlight using the guide on the developers wiki: http://dev.typolight.org/wiki/typolight ... sChecklist . This seemed to work ok, but I have some concerns about it.

1. It recommends using the Safe Mode Hack, but I worry about entering the username and password into the localsetting.php file.
2. The article is written in 2008 and probably may not apply 100% to the current version.
3. The TL check produces red items indicating problems: http: //sandbox.oed.umn.edu/tl/typolight-check.php (added a space after http so that the link would not be followed by crawlers).

Perhaps there is a more current detailed installation document?

Thank you,
Tonu

[Ben]

Tonu,

Everything in the wiki article is still applicable. I would use the default .htaccess that is provided, though. So to answer your questions:

1. When you try to access /system/config/localconfig.php, all you can see is: "You can not access this file directly!"
2. The article still applies.
3. The red items simply indicate that you should use the SMH.

[tmikk]

Thanks Ben, this gives me confidence. I have the demonstration website working. It appears all is well.

Tonu

[scare]

Why don't you just switch off safe mode if you have complete control over your server? No need to use safe mode hack then

[tmikk]

When I switch off safe mode, I am not able to edit settings. I am not sure of the correct file and directory permissions and ownership to make the site work properly without the safe mode. Is there a guide that describes the setup of TYPOlight on a server that I have complete control over?

Thanks,
Tonu

[scare]

I don't know of such a guide and I don't really see a reason for such thing, as installation without safe mode should be really straighforward. You basically need to turn off safe mode in PHP, chown all files to www-data and make sure that localconfig.php and tmp directory is writable by web server and that's it.

[tmikk]

I did as you suggested and was able to install TL without the Safe Mode Hack just fine. What puzzles me however is that when I run the typolight-check.php script, I get a ton of permission errors on the files. It appears that the typolight-check.php script wants to see file permission 755 on directories, and 640 on files. What are the correct file permissions for TL after it has been installed?

[Ben]

Tonu - I think you're over-analyzing things. Just use TYPOlight, and if you get an error message when you try something, then adjust file permissions accordingly. Also, there is nothing wrong with using the SMH. It simply uses FTP to modify files instead of PHP.

[tmikk]

I want to make sure the installation is secure. With the safe mode hack, the problem is that the user credentials for FTP are in clear text in the localconfig.php file. This does not seem ideal.

The problem with owning files as www-data is that all files and directories for TYPOlight have 755 permission setting which does not seem secure. How are the directories and files protected from regular web visitors?

[Ben]

I see your point about security. Are you bound to using the existing web server? I have several hosting companies that I use where I simply upload the files, run the install script and everything runs perfectly without SMH.

Regarding FTP login details in plain text, did you see my previous comment?

When you try to access /system/config/localconfig.php, all you can see is: "You can not access this file directly!"

[scare]

I would say that for maximum security files should be readable and folders readable and executable by file owner only. Except for localconfig.php and tmp folder, which must be writable too. This is the maximum security you can get, just ignore the check tool, I believe those permissions are required to make TL work on systems with safe mode.

[warrior]

I'm trying to install Typolight v.2.7.6 on remote server, but in the first step - when installer must type in first time password "typolight", installation stops. With no one of earlier Typolight versions I didn't get stop at this step. Does it happens with someone else or not?

[Ben]

Start out by turning on error reporting: http://www.typolight.org/faq-reader/ite ... light.html

Post any error messages that you get. My guess is that /system/config/localconfig.php is not readable.
You should also try the system check tool: http://www.typolight.org/configuring-th ... check-tool

[warrior]

Actualy I didn't get any error messages, Ben (http://www.banskasrcb.lv/bbb/typolight/install.php). Typolight system check tool shows that all things with PHP configuration, File permissions and Files are ok (http://www.banskasrcb.lv/bbb/typolight-check.php). I set ['displayErrors'] = true in local config file also. And I have another installation of Typolight on this remote FreeBSD server too (http://www.banskasrcb.lv/bcb/), which are in running state. But if I trying to install one more site, it stops in first step without any errors.

[Ben]

I see that an error of "Invalid password!" shows up when doing just that. Have you checked your sever logs to see if anything shows up? Also, have you tried the SMH just to see if it has any effect? (http://www.typolight.org/faq-reader/ite ... itten.html)

[warrior]

Thanks, Ben! I solve this by changing CHMOD on files localconfig.php and config.php. After that installation was succesfull.