xp_publish broken in devel xp_publish broken in devel
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

xp_publish broken in devel

Started by Casper, September 14, 2004, 03:25:00 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Casper

Copy of report by cryogenic, here.  I have tested and can confirm.  Sugest rollback to previous version.

OK, so just for fun I decided to try the xp_publish method of posting pics to my gallery. I'd just updated to the latest CVS version 1.15 posted about 24 hrs ago. However it did not work as expected.    I did as instructed on the xp_publish.php page, merged the registry entry, selected the pics I wanted to upload, entered my username/pass, picked the gallery I wished for the pics to be placed in... pressed finish, pics are nowhere to be found. So I check other galleries, still no luck. I checked the log files... again no sign. I even FTP'd into my host to find the pics, nowhere to be found. At this point, I deleted the registry entries, re-downloaded the .reg file, re-merged, tried again. Same result. I downgraded to the previous CVS version of xp_publish.php, 1.13, and it worked perfectly. It appears that the substitution of the superglobals broke something somewhere. Everything else on my gallery has been upgraded to the versions with the superglobal variables, so I don't think file version mismatches would be the problem. Everything else appears to function as expected (including uploading directly from CPG and also using the batch upload feature). I also found it odd that downgrading to 1.13 fixed the problem immediately without even re-merging the registry entries.
It has been a long time now since I did my little bit here, and have done no coding or any other such stuff since. I'm back to being a noob here

Nibbler

I'd guess this is caused by $HTTP_POST_FILES being changed to $_POST instead of $_FILES

Tranz

Nibbler,

You were correct. :) I replaced $_POST['userpicture'] with $_FILES['userpicture'] and the upload worked.

Joachim Müller


Tranz

Changes have been committed, and the new bug report has been split into a new topic.