News:

CPG Release 1.6.29
During HTML5 upload, keep pseudo blank code 200 messages from triggering error condition
added Russian language
correct failure to use theme menu icons in album manager
minor vulnerabilities mitigation

Main Menu

file path access denied

Started by haat, May 15, 2005, 07:02:00 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

haat

I have been running version 1.3.2 for several months without any problems.  Today  I logged in to upload pictures and on the top of the upload screen I see the following:

Warning: is_dir(): Stat failed for ./albums/edit/. (errno=13 - Permission denied) in  (path) upload.php on line 432
Warning: filemtime(): Stat failed for ./albums/edit/. (errno=13 - Permission denied) in  (path) upload.php on line 440
Warning: unlink(./albums/edit/.): Permission denied in (path) upload.php line 453

Appears 2x's in the actual html page.

I understand there are security problems with 1.3.2 - XSS .  Is this part of the problem?  Not very adept at PHP - any help would be appreciated

Thanks,
Ken

haat

Dumbass - I fixed it.  Somehow permissions were changed on the edit directory.  Dohhhh!

-ken

Nibbler

Updating to 1.3.3 will stop this from happening again, however it is unrelated to the XSS issue.