1.4.2 vulnerabilities?

xyzxyz

Joined: 2004-02-18
Posts: 14
Posted: Wed, 2004-02-25 16:23

I'm running 1.4.2 on three different hosts. Two of these hosts are fine and the program runs as it should.

The third site (Globat) gives problems. After having the program run properly, suddenly overnight it has failed - now on three different occasions in the past week or so. (No gallery appears & config will not load).

The host says this:

Quote:
This might have been caused by the upgrades and sytems checks we have been continuously doing on the servers. Please check and verify again as everything should already be back to normal.

Well it still isnt working. My questions is this: how could system upgrades & checks affect gallery? Is it one key file or...??? Is something being changed inside the gallery folder? If so what are the possibilities? And how can this happen if it's in secure mode?

----
Give us your Gallery/webserver information to get a faster answer.
Get this information from the PHP diagnostic (in the configuration wizard).
Gallery URL (optional but very useful):
Gallery version:
Apache version:
PHP version (don't just say PHP 4, please):
Graphics Toolkit:
Operating system:
Web browser/version (if applicable):
 
k2ski13

Joined: 2004-02-23
Posts: 17
Posted: Wed, 2004-02-25 21:35
xyzxyz wrote:
I'm running 1.4.2 on three different hosts. Two of these hosts are fine and the program runs as it should.

The third site (Globat) gives problems. After having the program run properly, suddenly overnight it has failed - now on three different occasions in the past week or so. (No gallery appears & config will not load).

The host says this:

Quote:
This might have been caused by the upgrades and sytems checks we have been continuously doing on the servers. Please check and verify again as everything should already be back to normal.

Well it still isnt working. My questions is this: how could system upgrades & checks affect gallery? Is it one key file or...??? Is something being changed inside the gallery folder? If so what are the possibilities? And how can this happen if it's in secure mode?

----
Give us your Gallery/webserver information to get a faster answer.
Get this information from the PHP diagnostic (in the configuration wizard).
Gallery URL (optional but very useful):
Gallery version:
Apache version:
PHP version (don't just say PHP 4, please):
Graphics Toolkit:
Operating system:
Web browser/version (if applicable):

System upgrades can definitely effect your gallery on the one host. The link below is one example of this:

http://gallery.menalto.com/index.php?name=PNphpBB2&file=viewtopic&t=14222

Other than not displaying either in config or normal mode, is there any other error information you can give?
 
nivekiam
nivekiam's picture

Joined: 2002-12-10
Posts: 16503
Posted: Thu, 2004-02-26 04:02
Quote:
Well it still isnt working. My questions is this: how could system upgrades & checks affect gallery? Is it one key file or...??? Is something being changed inside the gallery folder? If so what are the possibilities? And how can this happen if it's in secure mode?

Did they happen to enable safemode for PHP? As, k2ski13, asked is there any other information you can provide? You didn't state what they upgraded or changed. What version of Apache and PHP are running on that server?

BTW, even though you may be the "owner" of the files, they are still the admins of the system and have God-like powers over everything. You cannot hide anything from them. They can move, copy, delete, modify anything no matter what permissions you set on your files.
 
xyzxyz

Joined: 2004-02-18
Posts: 14
Posted: Thu, 2004-02-26 04:29

thanks guys...

I got this response from my host:

I have enabled your php pages to display any error messages by inserting this line...

ini_set('display_errors',1);

It seems that there was a file or function deleted on your php pages... try tocheck where the function "geteverybody()" is and reupload it on the server.

I'm not aprogrammer so the ini_set line doesn't mean much to me as I don't know where to find these errors -sigh. I wish these support people would refer you to some support material to explain their answer.

I tried a setup on another host (host 2)by doing this:
1) setup an empty gallery on host 2 just to get a config file
2) redo the entire gallery on host 1
3) copy the entire gallery from host 1 to host 2 as gallery2
4) modify the config.php file to match the paths in step 1)
5) add anew .htaccess file to gallery2
6) surprise it worked! so now I have a backup album on another site

so when the gallery on host 1 likely fails tomorrow morning (ugh) I can redirect to host 2. Not ideal.

Or maybe I can copy back the entire gallery everyday it fails from my computer to the host site -a real pain in the butt. if it gets to be too much I'll just go back to Breezebrowser which never fails (ain't php).
 
xyzxyz

Joined: 2004-02-18
Posts: 14
Posted: Thu, 2004-02-26 14:49

Well gallery did fail on host 1 again this morning as I expected but worked fine on host 2 where i copied it over changing only the paths in config.php.

So I made a new gallery folder this morning and uploaded the whole working gallery file that I saved yesterday from host 1 to this new folder (gallery2) on host 1.

You guessed it. It worked fine. That proves to me that there is nothing wrong with the script but a problem overnight with host "upgrades". I guess the answer might be to upload this saved working gallery2 every morning -a real pain. If I knew which gallery file was being changed I could just upload that i guess -no point uploading albums and skins every morning but dunno which others wouldn't change. Still this is a real pain.

I presented this info to the host so we'll see what they have to say other than we are very sorry.