• Version com_expose_4.6.3_alpha3c
• PHP 5.2.8/Apache 2.2.11/cgi/fastcgi/suphp/suhosin
• System check all passed: Files owned by user and writable (suexec !)
• Hash check passed
• Joomla 1.5.9

After changing a setting in configuration and save it redirects to the album manager interface (demanding the password) without saving.
This is a bug imho ?

Paul Widjaja

Expose needs to change the files as 'Apache' user, and I believe it can't do this in your config as it is. You could try to look for the error, or try to modify the config.xml file yourselve as workaround.

This is a serious error in that case since you are telling me now that you cannot run Expose properly on a host that runs cgi/suexec and suPHP. If you tell me that you absolutely cannot change a config file when not using a defunct and very vulnerable Apache2handler you have a very serious issue at hand. If a host runs cgi/fastcgi with suexec and suPHP the files should be and are owned by the user. No other way! Realize what you say! No descent host runs Apache handler these days for security reasons and if they do they are worthless!

Every serious host runs cgi/suPHP these days and if your bridge is not possible to run on such a hosting environment which is the default these days for hosts who care about security (read Joomla-security thread! as well!) you are having serious issues with this product.

Paul Widjaja - Operations Manager Joomadesk

Well, I call it 'Apache' user, but I mean the 'executing' user. Mostly, ftp-uploaded files (when ftp-user account differs from the executing user account) usually can't be changed anymore by the server.