Lots of Error: file_exists(): open_basedir restriction in effect. in Log

[TheColin21]

How to use GitHub

• Please use the 👍 reaction to show that you are affected by the same issue.
• Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
• Subscribe to receive notifications on status change and new comments.

Steps to reproduce

1. Login to Nextcloud
2. Go to Settings -> Logs
3. Be annoyed by the messages

Expected behaviour

No open_basedir restriction messages.

Actual behaviour

Error: file_exists(): open_basedir restriction in effect messages for the following paths:
/appinfo/routes.php
/l10n/en.js
/templates/
/img/app.svg (and lots of other SVGs)

Server configuration

Operating system: Ubuntu 20.04

Web server: Apache2 behind Nginx reverse proxy

Database: MariaDB 10.5.11

PHP version: 8.0.7

Nextcloud version: 21.0.3

Updated from an older Nextcloud/ownCloud or fresh install: Updated

Where did you install Nextcloud from: nextcloud.com

Signing status:

Signing status

No errors have been found.

List of activated apps:

App list

Enabled: - accessibility: 1.7.0 - activity: 2.14.3 - admin_audit: 1.11.0 - apporder: 0.13.0 - breezedark: 21.0.8 - camerarawpreviews: 0.7.11 - checksum: 1.1.2 - cloud_federation_api: 1.4.0 - comments: 1.11.0 - contactsinteraction: 1.2.0 - dashboard: 7.1.0 - dav: 1.17.1 - documentserver_community: 0.1.9 - extract: 1.3.1 - federatedfilesharing: 1.11.0 - federation: 1.11.0 - files: 1.16.0 - files_antivirus: 3.2.1 - files_downloadactivity: 1.10.0 - files_external: 1.12.0 - files_fulltextsearch: 21.0.2 - files_mindmap: 0.0.24 - files_pdfviewer: 2.1.0 - files_rightclick: 1.0.0 - files_sharing: 1.13.1 - files_texteditor: 2.14.0 - files_trackdownloads: 1.10.0 - files_trashbin: 1.11.0 - files_versions: 1.14.0 - files_videoplayer: 1.10.0 - firstrunwizard: 2.10.0 - fulltextsearch: 21.0.1 - fulltextsearch_elasticsearch: 21.0.1 - imageconverter: 1.3.1 - impersonate: 1.8.0 - logreader: 2.6.0 - lookup_server_connector: 1.9.0 - mail: 1.9.5 - maps: 0.1.8 - metadata: 0.13.0 - notifications: 2.9.0 - notify_push: 0.2.1 - oauth2: 1.9.0 - onlyoffice: 7.0.2 - password_policy: 1.11.0 - passwords: 2021.6.20 - photos: 1.3.0 - previewgenerator: 3.1.1 - privacy: 1.5.0 - provisioning_api: 1.11.0 - ransomware_protection: 1.10.1 - recommendations: 1.0.0 - serverinfo: 1.11.0 - settings: 1.3.0 - sharebymail: 1.11.0 - spreed: 11.2.2 - support: 1.4.0 - survey_client: 1.9.0 - systemtags: 1.11.0 - text: 3.2.0 - theming: 1.12.0 - twofactor_backupcodes: 1.10.0 - updatenotification: 1.11.0 - user_ldap: 1.11.0 - user_status: 1.1.1 - viewer: 1.5.0 - weather_status: 1.1.0 - workflowengine: 2.3.0 Disabled: - encryption - nextcloud_announcements

Nextcloud configuration:

Config report

{
"system": {
"instanceid": "REMOVED SENSITIVE VALUE",
"passwordsalt": "REMOVED SENSITIVE VALUE",
"secret": "REMOVED SENSITIVE VALUE",
"trusted_domains": [
"cloud.clnp.eu",
"cloud.saef-zf.de"
],
"datadirectory": "REMOVED SENSITIVE VALUE",
"dbtype": "mysql",
"version": "21.0.3.1",
"overwrite.cli.url": "https://cloud.clnp.eu",
"dbname": "REMOVED SENSITIVE VALUE",
"dbhost": "REMOVED SENSITIVE VALUE",
"dbport": "",
"dbtableprefix": "oc_",
"mysql.utf8mb4": true,
"dbuser": "REMOVED SENSITIVE VALUE",
"dbpassword": "REMOVED SENSITIVE VALUE",
"installed": true,
"mail_smtpmode": "sendmail",
"mail_from_address": "REMOVED SENSITIVE VALUE",
"mail_domain": "REMOVED SENSITIVE VALUE",
"memcache.local": "\OC\Memcache\APCu",
"memcache.distributed": "\OC\Memcache\Redis",
"redis": {
"host": "REMOVED SENSITIVE VALUE",
"port": 0
},
"memcache.locking": "\OC\Memcache\Redis",
"updater.release.channel": "stable",
"loglevel": 0,
"maintenance": false,
"theme": "",
"app_install_overwrite": [
"camerarawpreviews",
"files_texteditor",
"extract",
"documentserver_community"
],
"ldapIgnoreNamingRules": false,
"ldapProviderFactory": "OCA\User_LDAP\LDAPProviderFactory",
"default_language": "de",
"default_locale": "de",
"default_phone_region": "DE",
"defaultapp": "files",
"trusted_proxies": "REMOVED SENSITIVE VALUE"
}
}

Are you using external storage, if yes which one: Local, Nextcloud

Are you using encryption: no

Are you using an external user-backend, if yes which one: no

Client configuration

Browser: Firefox/Chrome/Edge, does not matter

Operating system: Windows 10, still does not matter

Logs

Web server error log

Web server error log

nothing relevant there. Just 200s from log polling

Nextcloud log (data/nextcloud.log)

Nextcloud log

Error PHP Error: file_exists(): open_basedir restriction in effect. File(/templates/) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/Base.php#68 Gerade eben Error PHP Error: file_exists(): open_basedir restriction in effect. File(/appinfo/routes.php) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Route/Router.php#135 Gerade eben Error PHP Error: file_exists(): open_basedir restriction in effect. File(/appinfo/routes.php) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Route/Router.php#135 Gerade eben Error PHP Error: file_exists(): open_basedir restriction in effect. File(/appinfo/routes.php) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Route/Router.php#135 Gerade eben Error PHP Error: file_exists(): open_basedir restriction in effect. File(/appinfo/routes.php) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Route/Router.php#135 Gerade eben Error PHP Error: file_exists(): open_basedir restriction in effect. File(/templates/) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/Base.php#68 Gerade eben Error PHP Error: file_exists(): open_basedir restriction in effect. File(/appinfo/routes.php) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Route/Router.php#135 Gerade eben Error PHP Error: is_file(): open_basedir restriction in effect. File(/l10n/en.js) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/ResourceLocator.php#106 Gerade eben Error PHP Error: file_exists(): open_basedir restriction in effect. File(/templates/) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/Base.php#68 Gerade eben Error PHP Error: file_exists(): open_basedir restriction in effect. File(/templates/) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/Base.php#68 Gerade eben Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/app.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/circles.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/column.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/options.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/filteradd.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/emoji.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/reply.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/drag-handle.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/answer-long.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/answer-short.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/answer-dropdown.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/answer-multiple.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/answer-checkbox.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/forms.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/rename.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/icon-manual.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/icon-list-up.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/icon-list-down.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/icon-subtasks-hidden.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/icon-subtasks-visible.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/icon-alphabetically.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/icon-task-star.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/icon-list.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/icon-due.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/icon-start.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/color-picker.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/timezone.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/repeat.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/reminder.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/briefcase.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/eye.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/new-calendar-with-task-list.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/new-calendar.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/embed.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/view-list.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/view-week.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/view-day.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/view-module.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/rightarrow.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132 vor 2 Minuten Error PHP Error: file_exists(): open_basedir restriction in effect. File(/img/leftarrow.svg) is not within the allowed path(s): (/var/www/vhosts/domain.tld/:/tmp/:/proc/meminfo:/proc/cpuinfo:/proc/uptime:/usr/share/dict/words) at /var/www/vhosts/domain.tld/cloud.domain.tld/lib/private/Template/IconsCacher.php#132

Pretty much all there paths are inside the nextcloud folder. As you can see, this folder is part of the allowed paths

[cgzones]

I think the common feature is the usage of OC_App::getAppPath, which seems to not return a correct prefix path.

[Tealk]

The problem also exists with Nextcloud version 22

[marchellodev]

Doing the chmod 775 and changing the folder owner to www fixed this problem for me

[benurb]

The problem seems to be related to the core being treated as an app.
https://github.com/nextcloud/server/blob/master/lib/private/legacy/OC_App.php#L531
getAppPath is called with $appId core, which calls findAppInDirectories. This call returns false, because core is no app. It's located in the root folder, not in the apps folder.
I don't know what's a correct fix. I symlinked core into apps, which removes a few of the mentioned error messages, but leaves:

Error | PHP | Error: file_exists(): open_basedir restriction in effect. File(/img/app.svg) is not within the allowed path(s): (/var/www/html:/dev/urandom:/proc/meminfo:/tmp:/external) at /var/www/html/lib/private/Template/IconsCacher.php#131
Error | PHP | Error: file_exists(): open_basedir restriction in effect. File(/img/app-dark.svg) is not within the allowed path(s): (/var/www/html:/dev/urandom:/proc/meminfo:/tmp:/external) at /var/www/html/lib/private/Template/IconsCacher.php#131

Probably it's not a good idea to link core into apps, but maybe the result is still of any use to the devs.

[Hinyka]

I solved it by modifying the getAppPath function.
https://github.com/nextcloud/server/blob/master/lib/private/legacy/OC_App.php#L539

-return false;
+return OC::$SERVERROOT;

No errors in the log now.

[Tealk]

Have tried the fix as well so the following is still in my log
Error: is_readable(): open_basedir restriction in effect. File(/usr/share/dict/words) is not within the allowed path(s)

[fragxz]

I solved it by modifying the getAppPath function.
https://github.com/nextcloud/server/blob/master/lib/private/legacy/OC_App.php#L539

-return false;
+return OC::$SERVERROOT;

No errors in the log now.

I tried that and was happy first, but then I wanted to authenticate my desktop client and it didn't work anymore. Also I couldn't logout anymore. As I reverted this change, it all worked again. Just a heads up.

[Hinyka]

This is a more sensitive fix. You can test it. It works for me without any errors.
owncloud/core@976da3a

Workaround /templates/

server/lib/private/Template/Base.php

Lines 65 to 71 in 74e7934

	*/
	protected function getAppTemplateDirs($theme, $app, $serverRoot, $app_dir) {
	// Check if the app is in the app folder or in the root
	if (file_exists($app_dir.'/templates/')) {
	return [
	$serverRoot.'/themes/'.$theme.'/apps/'.$app.'/templates/',
	$app_dir.'/templates/',

-		if (file_exists($app_dir.'/templates/')) {
+		if ($app_dir !== false && file_exists($app_dir.'/templates/')) {

Workaround /appinfo/routes.php

server/lib/private/Route/Router.php

Lines 130 to 137 in 74e7934

	if (isset($this->loadedApps[$app])) {
	return;
	}
	$file = \OC_App::getAppPath($app) . '/appinfo/routes.php';
	if ($file !== false && file_exists($file)) {
	$routingFiles = [$app => $file];
	} else {
	$routingFiles = [];

-			$file = \OC_App::getAppPath($app) . '/appinfo/routes.php';
-			if ($file !== false && file_exists($file)) {
+			$appPath = \OC_App::getAppPath($app);
+			$file = $appPath . '/appinfo/routes.php';
+			if ($appPath !== false && file_exists($file)) {

Workaround /l10n/en.js
@Tealk #27759 (comment), @schwabelbauch #27759 (comment)
Error can be reproduced only on browser with en_US language (on login page).
This workaround fixes this error.

server/lib/private/Template/ResourceLocator.php

Lines 102 to 108 in 0447b53

	* @return bool True if the resource was found, false otherwise
	*/
	protected function appendIfExist($root, $file, $webRoot = null) {
	if (is_file($root.'/'.$file)) {
	$this->append($root, $file, $webRoot, false);
	return true;
	}

-		if (is_file($root.'/'.$file)) {
+		if ($root !== false && is_file($root.'/'.$file)) {

Workaround /img/app.svg (and lots of other SVGs)

server/lib/private/Template/IconsCacher.php

Lines 170 to 176 in 0447b53

	} elseif (\strpos($url, $base) === 0) {
	if (\preg_match('/([A-z0-9\_\-]+)\/([a-zA-Z0-9-_\~\/\.\=\:\;\+\,]+)\?color=([0-9a-fA-F]{3,6})/', $cleanUrl, $matches)) {
	[,$app,$cleanUrl, $color] = $matches;
	$location = \OC_App::getAppPath($app) . '/img/' . $cleanUrl . '.svg';
	if ($app === 'settings') {
	$location = \OC::$SERVERROOT . '/settings/img/' . $cleanUrl . '.svg';
	}

-				$location = \OC_App::getAppPath($app) . '/img/' . $cleanUrl . '.svg';
+				$appPath = \OC_App::getAppPath($app);
+				if ($appPath !== false) {
+					$location = $appPath . '/img/' . $cleanUrl . '.svg';
+				}

[Tealk]

with only these changes i still get the error:
open_basedir restriction in effect. File(/l10n/en.js) is not within the allowed path(s)

or are the changes that were specified above also required @Hinyka ?

[schwabelbauch]

The changes from #27759 (comment) fixed the errors with file_exists().
The other errors are is_file() like
is_file(): open_basedir restriction in effect. File(/l10n/en.js) is not within the allowed path(s)

[patschi]

@nextcloud/server Due to the amount of reports and upvotes, I think it would make sense getting more attention for this issue?

@Hinyka's workaround looks good. The function OC_App::getAppPath() seems to return false when it doesn't find a valid app path:

server/lib/private/legacy/OC_App.php

Lines 531 to 540 in 0447b53

	public static function getAppPath(string $appId) {
	if ($appId === null || trim($appId) === '') {
	return false;
	}
	if (($dir = self::findAppInDirectories($appId)) != false) {
	return $dir['path'] . '/' . $appId;
	}
	return false;
	}

Hence it won't travel down the code paths responsible for the large amount of errors users are experiencing.

To add: But not sure if it would make sense, from an architecture standpoint, to rather use getAppPath() from the AppManager instead?

server/lib/private/App/AppManager.php

Lines 412 to 425 in 0447b53

	/**
	* Get the directory for the given app.
	*
	* @param string $appId
	* @return string
	* @throws AppPathNotFoundException if app folder can't be found
	*/
	public function getAppPath($appId) {
	$appPath = \OC_App::getAppPath($appId);
	if ($appPath === false) {
	throw new AppPathNotFoundException('Could not find path for ' . $appId);
	}
	return $appPath;
	}