Reported by ejsexton82, Today (15 minutes ago)
Reported by ejsexton82, Today (15 minutes ago)

What steps will reproduce the problem?
1. Deny write access to logging directory/
2. Set Logger/LogLevel to OFF in ESAPI.xml
3. Call new ESAPI('ESAPI.xml');


What is the expected output? What do you see instead?

Code generates a PHP Notice:

Warning: fopen(ESAPI_logging_file) [function.fopen]: failed to open stream:
Permission denied in
lib/apache-log4php/trunk/src/main/php/appenders/LoggerAppenderFile.php  on
line 67


What version of the product are you using? On what operating system?

Latest version on Ubuntu Apache 2.2


Please provide any additional information below.

reference/DefaultAuditor.php(591): $appenderLogfile->activateOptions();

Delete comment
Comment 1 by ejsexton82, Today (1 minute ago)

Probably not the best solution, but it seems to work.

	DefaultAuditor.patch
649 bytes   Download
Letractively/owasp-esapi-php,dotnes/owasp-esapi-php,sickworld/owasp-esapi-php,tashik/owasp-esapi-php,killent/owasp-esapi-php,dobreapa/owasp-esapi-php,nhajiyani/owasp-esapi-php,yousefjoe/owasp-esapi-php,mchibouni/owasp-esapi-php,Stito-Bahja/fgfgfd,Stito-Bahja/fgfgfd,kurtzaugg/owasp-esapi-php,folkenfanel/owasp-esapi-php,Letractively/owasp-esapi-php,sickworld/owasp-esapi-php,Letractively/owasp-esapi-php,folkenfanel/owasp-esapi-php,gpwebresearch/owasp-esapi-php,tsubasa853/owasp-esapi-php,gireeshkumar/owasp-esapi-php,dobreapa/owasp-esapi-php,AnvilStriker/owasp-esapi-php,oshanrube/owasp-esapi-php,kurtzaugg/owasp-esapi-php,qbdsoft/owasp-esapi-php,tashik/owasp-esapi-php,gpwebresearch/owasp-esapi-php,swieczorek/owasp-esapi-php,qbdsoft/owasp-esapi-php,tashik/owasp-esapi-php,yousefjoe/owasp-esapi-php,AnvilStriker/owasp-esapi-php,glannez/owasp-esapi-php,qbdsoft/owasp-esapi-php,Stito-Bahja/fgfgfd,nhajiyani/owasp-esapi-php,kurtzaugg/owasp-esapi-php,oshanrube/owasp-esapi-php,dotnes/owasp-esapi-php,glannez/owasp-esapi-php,sickworld/owasp-esapi-php,dobreapa/owasp-esapi-php,yousefjoe/owasp-esapi-php,gireeshkumar/owasp-esapi-php,tsubasa853/owasp-esapi-php,mchibouni/owasp-esapi-php,mchibouni/owasp-esapi-php,oshanrube/owasp-esapi-php,swieczorek/owasp-esapi-php,folkenfanel/owasp-esapi-php,gireeshkumar/owasp-esapi-php,glannez/owasp-esapi-php,killent/owasp-esapi-php,swieczorek/owasp-esapi-php,dotnes/owasp-esapi-php,gpwebresearch/owasp-esapi-php,AnvilStriker/owasp-esapi-php,tsubasa853/owasp-esapi-php,killent/owasp-esapi-php,nhajiyani/owasp-esapi-php