exec cmd in any of the code? exec cmd in any of the code?
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

exec cmd in any of the code?

Started by tibu, August 18, 2006, 08:20:55 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Print
Go Down Pages1
User actions

tibu

August 18, 2006, 08:20:55 PM Last Edit: August 19, 2006, 05:08:58 AM by GauGau
Maybe this isn't enough info, but my host (godaddy.com) is doing an upgrade that may cause any code with "exec cmd" to not function properly. Does anyone know if that effects coppermine code?

Here is the quote from their pages...

"Before upgrading to Hosting Configuration 2.0, it is important to realize that your site may experience technical problems after the upgrade. For security reasons, the new hosting configuration disables "exec cmd" for the execution of programs from server-side include-enabled pages. Any code using this method will not function correctly after the upgrade."

Nibbler

#1
August 18, 2006, 08:52:59 PM
Imagemagick is called via exec(). If you use IM then you'll need to switch to GD2 or use passthru.

tibu

#2
August 18, 2006, 09:13:38 PM
Thanks Nibbler!

For anyone reading this I think Imagemagik is not usually found on a hosted server. See the docs under setup for info on ImageMagik and GD2 (which I have). Check your php info file for the GD version you have.

If you have already installed Coppermine, you will find a phpinfo file (phpinfo.php) within the coppermine folder. Log in to your Coppermine setup as the admin and simply point (type in the URL) your browser to http://yourdomain.tld/your_coppermine_folder/phpinfo.php

Print
Go Up Pages1
User actions