Working with some change.
In config file, look at:
'urlManager' => array(
'urlFormat' => 'path',// or 'get'
'rules' => require('routes.php'),
'showScriptName' => true,// or false
),
And replace 'routes' by '/yourlimesurveyinstallationdir//application/config/routes.php'.
I also haven't got an answer on one of my other security related issues. Although I know LimeSurvey is based on free work I do think security issues should have a higher priority than anything else. It makes no sense to have a great system if someone can hack into it and mess with the data.
There are not a big security issue here, except for server without good security. Mine for example comletely seperate each user apache server, no access at other user file (excetp for root, but root is root, and root can not connect to my server).
Here, with access to log file, it's very easy to view the problem. If you don't have access to your logfile, or don't understand your logfile, maybe best is to ask at a professionnal server administrator.
Denis
PS:
Other_security_issues updated.
PS2: mysql user are not accessible by the "all world" but only by user some the server. If the server is good: only you and root)
I can't be the only one with this concern...