[GH-ISSUE #36] Apache mod_xsendfile cannot serve files above root path #25

New issue

Closed

opened 2026-02-26 02:31:50 +03:00 by kerem · 3 comments

kerem commented

2026-02-26 02:31:50 +03:00

Owner

Originally created by @mattsches on GitHub (Dec 14, 2015).
Original GitHub issue: https://github.com/koel/koel/issues/36

When running koel on my local Apache 2.4.12 with mod_xsendfile 0.12 enabled, it cannot play any song. The following error occurrs for each song I try to play:

[Mon Dec 14 19:52:39.429049 2015] [:error] [pid 27537] (20023)The given path was above the root path: [client 127.0.0.1:60736] xsendfile: unable to find file: /home/mattsches/music/foo/bar.mp3

The solution seems to be to white-list my music directory by setting the XSendFilePath option in my vhost config:

<VirtualHost *:80>
        ServerName koel.local
        XSendFilePath /home/mattsches/music
        DocumentRoot /var/www/vhosts/koel.local/httpdocs
        <Directory /var/www/vhosts/koel.local/httpdocs>
                DirectoryIndex index.html index.php
                Options FollowSymLinks
                AllowOverride All
                Order allow,deny
                allow from all
        </Directory>
</VirtualHost>

Not sure what else could be done about this.

Originally created by @mattsches on GitHub (Dec 14, 2015). Original GitHub issue: https://github.com/koel/koel/issues/36 When running koel on my local Apache 2.4.12 with `mod_xsendfile` 0.12 enabled, it cannot play any song. The following error occurrs for each song I try to play: ``` [Mon Dec 14 19:52:39.429049 2015] [:error] [pid 27537] (20023)The given path was above the root path: [client 127.0.0.1:60736] xsendfile: unable to find file: /home/mattsches/music/foo/bar.mp3 ``` The solution seems to be to white-list my music directory by setting the `XSendFilePath` option in my vhost config: ``` <VirtualHost *:80> ServerName koel.local XSendFilePath /home/mattsches/music DocumentRoot /var/www/vhosts/koel.local/httpdocs <Directory /var/www/vhosts/koel.local/httpdocs> DirectoryIndex index.html index.php Options FollowSymLinks AllowOverride All Order allow,deny allow from all </Directory> </VirtualHost> ``` Not sure what else could be done about this.

kerem closed this issue

2026-02-26 02:31:50 +03:00

kerem commented

2026-02-26 02:31:51 +03:00

Author

Owner

@phanan commented on GitHub (Dec 15, 2015):

It looks like a pure Apache config issue to me right?

@phanan commented on GitHub (Dec 15, 2015): It looks like a pure Apache config issue to me right?

kerem commented

2026-02-26 02:31:51 +03:00

Author

Owner

@mattsches commented on GitHub (Dec 15, 2015):

Right, but maybe you want to add this to the readme/docs?

@mattsches commented on GitHub (Dec 15, 2015): Right, but maybe you want to add this to the readme/docs?

kerem commented

2026-02-26 02:31:51 +03:00

Author

Owner

@phanan commented on GitHub (Dec 15, 2015):

I'm not sure. Installing an Apache module sounds out of Koel's scope to me.

@phanan commented on GitHub (Dec 15, 2015): I'm not sure. Installing an Apache module sounds out of Koel's scope to me.

kerem referenced this issue

2026-02-26 02:31:52 +03:00

[GH-ISSUE #39] Importing artists with a & in their name #30

kerem referenced this issue

2026-02-26 02:33:03 +03:00

[GH-ISSUE #544] 'Illegal mix of collations' when scanning a path #387

kerem referenced this issue

2026-02-26 02:34:37 +03:00

[GH-ISSUE #1666] Failed to load home screen data GUI error #912

kerem referenced this issue

2026-02-26 02:34:38 +03:00

[GH-ISSUE #1669] Unable to create smart playlist #914