mescon / Muximux

A lightweight way to manage your HTPC
GNU General Public License v2.0
1.14k stars 83 forks source link

settings.ini.php corruption #214

Open lettore opened 1 year ago

lettore commented 1 year ago

Hello, I run multiple Muximux instances in Docker with Linuxserver image, data is persisted on a Gluster volume. Randomly I get error accessing the webpage and I found that the culprit is the file settings.ini.php that become corrupted. I can understand this if I have modified the settings so Muximux is writing to the file, but it seems that Muximux keeps writing to this file also during normal operation. I tried to deny write access to this file but then Muximux webpage remains stuck loading. I'm wondering what is the problem, I know Gluster is not ideal for storing data like databases, but a simple text file should not have this kind of problems, and this happens only with Muximux.

cibban commented 1 year ago

I run Muximux with the linuxserver.io docker image and I've had the same issue for a couple of weeks now. I've deleted the file, even the entire directory, and set it all up from scratch every time but it only runs for a couple of days before it gets corrupted again. Normally it's just been gargled towards the end with random characters added but today the entire file looks like this:

; <?php die('Access denied'); ?>
[0x]
[0] = "androxgh0st"

Androxgh0st seems to be a worm on some sort. Should I be worried?

zlnimda commented 1 year ago

Got the same problem recently. Settings are not protected and could lead to a potential security breach, unless you require auth to access muximux.