Page 1 of 1

OC >= 3.0.2.x | Allowed Directories for Extensions

Posted: Wed Mar 04, 2020 8:34 pm
by OSWorX
Starting with OpenCart 3.0.2.x, the system does allow only the following directories to be written to:

Code: Select all

'admin/controller/extension/',
'admin/language/',
'admin/model/extension/',
'admin/view/image/',
'admin/view/javascript/',
'admin/view/stylesheet/',
'admin/view/template/extension/',

'catalog/controller/extension/',
'catalog/language/',
'catalog/model/extension/',
'catalog/view/javascript/',
'catalog/view/theme/',

'system/config/',
'system/library/',
'image/catalog/'
This is important, because if you try to install an additional extension (through the already integrated installer), the system will tell you that there is an attempt to install a file outside of the allowed folders.

While there are several extensions available on the OpenCart Marketplace which will break these restrictions, it is not recommended to use one of them (also if someone recommend to use it).

Why should I not use one of these extensions?
The restrictions above are made because of security reasons.
And they will help you to have a clean structure.

So, if you got one extension which is not able to install their files into these allowed folders, contact the developer to fix that!
If he is not willing to do so, or cannot, you can contact the OpenCart Support, they will fix that.

Re: OC >= 3.0.2.x | Allowed Directories for Extensions

Posted: Wed Mar 04, 2020 8:37 pm
by straightlight
Forum users encountering these issues can also create a new service request in the Commercial Support section of the forum to get this fixed as a custom job.