Old gallery some permission problems Old gallery some permission problems
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Old gallery some permission problems

Started by ZackIsDead, June 05, 2008, 05:24:57 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

ZackIsDead

Hi,

i've some problems but I think they have the same reason, so i write one thread.
It's an older gallery, I think 3 years or so, one change to a new server but updated to version 1.4.18

My problems:
1. Versioncheck doesn' work at all. All files are yellow or red. Examples:
addpic.php ist red, cpg version and file version both is "-"
$ getfacl addpic.php
# file: addpic.php
# owner: dvd
# group: dvd
user::rw-
user:www-data:r--
group::rw- #effective:r--
mask::r--
other::r--

same with config.php, but this is yellow
$ getfacl config.php
# file: config.php
# owner: dvd
# group: dvd
user::rw-
user:www-data:r--
group::rw- #effective:r--
mask::r--
other::r--


2. Admin tools:
Reload file dimensions and size information (1)
This results in
File albums/userpics/10234/DSCI0044.JPG does not exist !
$ getfacl albums/userpics/10234/DSCI0044.JPG
# file: albums/userpics/10234/DSCI0044.JPG
# owner: www-data
# group: www-data
user::rw-
user:www-data:rw-
group::rw-
mask::rw-
other::---

$ identify albums/userpics/10234/DSCI0044.JPG
albums/userpics/10234/DSCI0044.JPG JPEG 1513x1229 DirectClass 143kb


I've more of such problems but don't know why. The webserver has the right rights...

I've full access to the server if that helps for something.

If you've any ideas please let me know!

the gallery itself works but i want to recreate all intermediates and even the admin tool delete intermediates doesn't work for some pictures.

so, the main think is that i want a gallery where the system itself is consistent...i think that after some updates and moving to a new server there is something wrong now.

Hope you can help me!



Nibbler

Make sure that the folders that contain the files that are reported as not found have execute permissions set for the webserver user.

ZackIsDead

checked, e.g.:

$ getfacl albums/userpics/10252/
# file: albums/userpics/10252
# owner: www-data
# group: www-data
user::rwx
user:www-data:rwx
group::rwx
mask::rwx
other::---


Nibbler

You need to check all the parent directories too.

ZackIsDead

OK, sure,
. is r-x for www-data
albums/ is rwx and
albums/userpics/ also rwx

this is really curios...maybe the apache config helps?

gallery is installed in /home/dvd/webDreadlocksGalerie>

Quote
        php_admin_value open_basedir .:./:/home/dvd/
        php_admin_value safe_mode_exec_dir /usr/webbin/
        php_admin_value memory_limit 64M
        php_admin_value allow_url_fopen On
        php_admin_value upload_max_filesize 4M
        php_admin_value post_max_size 4M

        <Directory /home/dvd/webDreadlocksGalerie>
                Options None
                AllowOverride None
                Order allow,deny
                Allow from all
                AddDefaultCharset utf-8
        </Directory>

you can access the gallery at:
http://galerie.dreadlocks-wiki.de/index.php?lang=english
and for example, here is the intermediate missing:
http://galerie.dreadlocks-wiki.de/displayimage.php?album=random&cat=0&pos=-2811


hope that information can help...

Joachim Müller

Intermediate is not there: http://galerie.dreadlocks-wiki.de/albums/userpics/normal_Pups%28222%29.jpg is supposed to be embedded into http://galerie.dreadlocks-wiki.de/displayimage.php?pos=-2811, but returns
QuoteNot Found

The requested URL /albums/userpics/normal_Pups(222).jpg was not found on this server.

ZackIsDead

Thank you for your help, i tried to recreate the intermediate
( In Admin Menu: Update thumbs and/or resized photos (1))

QuoteUpdating thumbnails and/or resized images, please wait...
albums/userpics/normal_IMGP1569.JPG updated succesfully !
albums/userpics/normal_P1020571.JPG updated succesfully !
ERROR creating : albums/userpics/normal_IMG_0606-2~0.JPG
ERROR creating : albums/userpics/normal_Pups(232).jpg
albums/userpics/normal_P1060278.JPG updated succesfully !
albums/userpics/normal_l_0a2d903948555088f14ed926defe9bb7.jpg updated succesfully !
albums/userpics/normal_l_0d21f6dd8a459137c158d3c498de7b1d.jpg updated succesfully !
albums/userpics/normal_l_ef027ed861d4bc464ae1b4996657bfe8.jpg updated succesfully !
albums/userpics/normal_l_84b3dd2b6475802855b11968f992b16f.jpg updated succesfully !
ERROR creating : albums/userpics/normal_Pups(225).jpg
ERROR creating : albums/userpics/normal_Pups(224).jpg
ERROR creating : albums/userpics/normal_Pups(222).jpg
ERROR creating : albums/userpics/normal_Pups(220).jpg
ERROR creating : albums/userpics/normal_Pups(234).jpg
albums/userpics/normal_P1040219.JPG updated succesfully !
albums/userpics/normal_P1020559.JPG updated succesfully !


Maybe there is a problem with ( characters in filenames? do you need the debug output?

Joachim Müller

You should indeed avoid special chars. Check permissions as well. Debug_output is not needed.

ZackIsDead

Quote from: Joachim Müller on June 06, 2008, 12:45:05 PM
You should indeed avoid special chars

Hmm, the registered users can upload images in my gallery, so why doesn't take care coppermine on special chars?

I think the permissions are ok, but the version check also fails. The check fails on every file, but coppermine works. somehow very strange...


ANY idea to solve my problems?

ZackIsDead

hey, i did some debugging and i get a strange behaviour:

when i turn safe mode off
  php_admin_value safe_mode Off
i can recreate all intermediates. If i turn safe mode on, then pics with Umlauts and "(" etc. can't be resized, all others are ok.

version check still doesn't work...

any idea?

ZackIsDead

OK, i get the version check running!

I've to check the "Coppermine is in root directory on this domain" box, otherwise the script tries to access e.g. ..//anycontent.php, and ../ ist not in the allowed path set by open_basedir.