I am at 94 for system check, however i have issues with configuring the php.ini file in the root folder.
I've moved the tmp folder outside of the root directory and changed paths to reflect it on the php.ini and the configuration.php.
I am troubleshooting how to fix this issue of how to fix "open_basedir is not used" warning in RS firewall.
Please let me know what it is i am supposed to do to get this set correctly.
Thank you,
Jo

Joomla 3.4.6
RSFirewall 2.9.2.

RSFirewall! provides a "fix" button for when the system scan has been completed. Clicking it will enable RSFirewall! to create a php.ini file in your root site folder that will incorporate some PHP related adjustments (including an open_basedir restriction).

Alexp,
I had already clicked the "fix" button and it generated the php.ini file. I've checked it over and it seems to be the correct configuration as described in your knowledgebase, I even copied it into the administrator folder as suggested, but the warnings persist for the open base directory. Also "disable_functions is not used" is still showing as a warning.

Here is the contents of the php.ini file:

allow_url_include=Off
disable_functions=show_source, system, shell_exec, passthru, exec, phpinfo, popen, proc_open
open_basedir=C:\xampp\htdocs\newbridgecheese;C:\xampp\tmp;C:\Windows\TEMP;C:\xampp\htdocs\nbc_tmp/tmp;C:\xampp\htdocs\newbridgecheese/logs

thank you.
Jo

The following article should provide more insight on this:

https://www.rsjoomla.com/support/documentation/rsfirewall-user-guide/frequently-asked-questions/php-check-rsfirewall-has-created-a-phpini-but-it-does-not-work.html

Hi Alexp,
I contacted the server administrator. I believe he adjusted permissions to the php.ini file that was generated by RSFirewall - He said that was all he knew to do - he is not familiar with Joomla.

It is still not working. My score is up to 96, however the open base dir issue persists.
Can you give me an idea of what I should tell the IT guy for the server?
Thanks so much,
jo

Not all server configurations allow local php.ini files for overriding PHP directives. This is a server side issue / configuration.