Moving Cache Directory?

[brad.baker]

Our openx cache directory was recently hacked with a "web shell". We've removed the hacked files and we know we need to upgrade from openx to revive but because of customization's in our openx implementation - that isn't particularly straight forward. (It'll take more than a day or two to do an upgrade so we're trying to come up with ways to mitigate our risk in the interim.)

 

Can we move the openx cache directory above the apache root? So for instance say the apache htdocs location is /apache/htdocs, and the cache directory is located at /apache/htdocs/var/cache, could we move the cache directory to /apache/cache?

 

I see an entry in the openx config file:

[oxCacheFile]

cachePath=

 

Is that where we can set this? 

 

Thanks

Brad

[tt1551239]

Hi Brad,

Have you been able to solve this issue and understand the attack vector?

 

It looks like my organization was attacked using a similar vector and I was wondering if there are any insights you can share on dealing with this?

 

Thanks,

[andrewatfornax]

Hi @brad.baker,

Yes, you can absolutely move directories about like this, and configure Revive Adserver to manage - just make sure that the permissions are set so that the web server user can access the directory.