FTP Forbidden Access to Images Files FTP Forbidden Access to Images Files
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

FTP Forbidden Access to Images Files

Started by Sax, October 29, 2008, 10:44:14 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Sax

Hello to everybody, my coppermine gallery always worked fine but 2 weeks ago I got an error if I click on every photos on my site.

http://pompierilugano.ch/album/index.php


I don't know what happened, but I've TRIED ALL, but the problem remained (db mysql, via FTP, coppermine options (login interface), .....)

I saw via FTP that some of my PHOTOS (more than 5'000), own to "Apache" and some to "Pompier".
The photos that own to Pompier I menaged to change it to right 777 but the photos that own to Apache ARE IMPOSSIBLE to transform into 777.......

HELP please, How can I change the rights to "rwxrwxrwx" also for the images who belongs to APACHE??????

Thank you very much, for me this is a very big and serious problem
Greets

Nibbler

You need to ask your host to change ownership/permissions for you.

Sax

Hello, thank you, I do it, and I menage to transform the rights of the apache photos in rw-rw-rw......but not into rwx-rwx-rwx.
The problem still persist.
This is the procedure it told me to do to change these rights:

http://www.metanet.ch/support/faq/index.php?x=&mod_id=2&root=10&id=188


I don't know why I still can't see the photos... is because the rights MUST be rwx?

thank you for the answer


Sax

Hello, sorry erase my last email: I saw that EVEN the images with the OWNER Pompier (not apache) and with the attributes 777 CANNOT be seen!!!!!
Always give me the same error when I click on the photo (for the thumbnails it's ok):

--------------------------------------------------------------------------------
Forbidden
You don't have permission to access to this document on this server.

Apache Server at pompierilugano.ch
---------------------------------------------------------------------------------

So I think that the rights, the owner are not influent on my case....what can I change on coppermine/db to see my photos?

Thank you very much
greets


Stramm

The troubles you're running into are most probably not related to coppermine.

The reason might be wrong permissions. Here your webhost can be from assistance. However something must have changed on your server. Cause things usually don't stop 'working' without any reason. So try to remember if you changed something on your box two weeks ago. Maybe you've added some kind of hotlink protection? If so remove that.


Joachim Müller

The most important sentence of the permissions section of the docs:
QuoteIf you can't figure how to set permissions properly, ask your webhost for support.
We mean it! Ask your webhost, not us. We can not help you to figure out permissions or ownership issues. Some additional information taken from the preliminary docs for cpg1.5.x that apply for cpg1.4.x as well:
QuoteBy default, files and folders on a webserver are usually not writable, so you will probably have to change permissions before installion, for the reasons mentioned above. It's really mandatory that you set/change (CHMOD) permissions - or you will run into issues sooner or later.

To be able to set permissions correctly, you have to understand how they work: there are read, write and execute permissions (abbreviated with rwx) for each folder and file. Permissions on a parent folder can propagate to a child folder or the files within it, but it's possible to tweak your setup so that unwanted permissions will not propagate to child folders and resident files.

However, there are differences between the different operating systems that are used as webservers. As a result, there are a number of different approaches. As coppermine is designed to run on many different setups, we've included some basic instructions. Those who know their way around may find these instructions somewhat generalized and lacking in details.
Note: it is not your local, client computer that matters, permission-wise, but, rather, the operating system used by your webserver. If you're not sure what OS your server is running on, try the CHMOD instructions first - most webservers run a version of Unix/Linux. If you can't figure how to set permissions properly, ask your webhost for support.
Section "Asking for support on permissions issues" from the same page:
QuoteMost users who come from a Windows-background (or who have no idea about how permissions work at all) frequently ask on the Coppermine support board "Why does this have to be so complicated? Why don't you just create a script that handles all those complicated permission issues for me?". The answer is pretty straightforward: because we can't.
Coppermine has been built to work on a number of platforms and operating systems. The permissions that you need to set are part of how the operating system of your webserver works - they are not related to Coppermine in itself. A script can't assign permissions to itself if it doesn't have the privilege to do so. Think of it as if it was the structure of an army: a soldier who is low in rank can not promote himself to be a general; only officers who actually have higher privileges can promote regular soldiers to a higher rank. They wouldn't make them a general in the first place though, but just give them the rank they need to do their job (i.e. they would promote a private to corporal).
As the setup of webservers differs, we can't give you a simple, straightforward instruction like "CHMOD everything to 755 and you'll be done". Although this may be the case for many on shared webhosting, it might not apply to you. On some server setups, it might not be enough. On others, it might be a security risk. Yet on another machine, it may not apply at all because there is no such command.

Supporters are reluctant to answer the same questions on permissions over and over gain, as they are not related to Coppermine in the first place. If you ask a permissions-related question on the Coppermine support board that clearly shows that you haven't read the documentation (at least the part that covers permissions), then you will probably get a harsh answer, or no answer at all. Please think twice, read the permissions section carefully. There's little others could do to help you on this. If you're really stuck, you better ask your webhost for support.

Sax

Hello, thank you for the explanation, one more thing: I saw that there is a file called "displayimage.php", with owner "root" that has only the "rw" attributes and not "rw-rw-rw"....is it possible that the responsible is this?
Can you tell me exactly wich are the MAIN files of coppermine that have to be RW-RW-RW so I can contact my webmaster and tell him to chage the attributes.....
Thank you
byeeee

Joachim Müller

The permissions section explains this as well. Please read it before asking even more questions.