Multiple OSCommerce file manager problem

[hmag]

Hi again,
I have posted on OSCommerce.com about this, but have received no solutions to this one yet, so hope someone here can help.
I have a minor problem here (at least I think so) - I have installed a demo store directly from the 2.2MS1 download - perfect, no problems, located on my server in:

/Library/WebServer/WebSites/domain.com/shop/demoshop

I installed a second OSC at:

/Library/WebServer/WebSites/domain.com/shop/shop1

When I go into the admin & then into the file manager, I can navigate up out of the /shop1 directory & then into /demoshop - this is a security issue & I wonder if I can prevent this happening in any other way than installing to /Library/WebServer/WebSites/domain.com/shop1

Any help is really appreciated - for your info, I want both stores to have completely separate databases, directories etc..., so one store doesn't see another. thanks again.

[hmag]

Hi again,
After being unable to find a cure from advice given or searched for, I found the solution to this problem - it's as simple as setting the documentroot as the directory in which you serve your documents for OSC from. After doing this, I saw no directories listed above the OSC store directory - a good thing.

[michael_s]

Where are you setting this? In the configure.php? If done there, it would be easy for a user to simply change the doc root to higher up the tree.