Many security tools and blogs suggest setting the open_basedir in the php.ini file.  The open_basedir directive "Limits the files that can be accessed by PHP to the specified directory-tree, including the file itself. ... When the file is outside the specified directory-tree, PHP will refuse to access it." *

However, it can often trigger the error:

JFolder::create: Path not in open_basedir paths

In order to solve this, you have three options: