LaiRu.org

Web root directory

The web root is the top-level directory for request-addressable site files.

Target guide

The default document root is /var/www/html. A site can override it in /etc/lairu/config/*.ini, with the command-line --docroot flag, or with FastCGI values sent by nginx or Apache. In web mode, request-targeted file resolution cannot escape that root.

Application code should still validate visitor-supplied path fragments. Treat the document root as the final boundary, not as permission to concatenate arbitrary request parameters into paths.

Examples

Working pattern

1/var/www/html
Use this as a focused starting point and adapt it in context.

Match nginx root and LaiRu docroot

1root /var/www/html;2fastcgi_param DOCUMENT_ROOT $document_root;3fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;4fastcgi_pass unix:/run/lairu/lairu-fpm.sock;
In FPM mode, the web server root and FastCGI parameters are part of the trust boundary. Keep them consistent.

Set the same boundary in .ini

1[paths]2document_root = /var/www/html3session_dir = /var/lib/lairu/sessions4socket_dir = /run/lairu
The default installation paths can be overridden for portable local installs or test sites.

Related