News:

CRITICAL UPGRADE CPG RELEASE 1.6.30
Version 1.6.30 removes a serious security issue that could allow unauthorized access to modify your site. Upgrade as soon as possible.

Main Menu

file path access denied

Started by haat, May 15, 2005, 07:02:00 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

haat

I have been running version 1.3.2 for several months without any problems.  Today  I logged in to upload pictures and on the top of the upload screen I see the following:

Warning: is_dir(): Stat failed for ./albums/edit/. (errno=13 - Permission denied) in  (path) upload.php on line 432
Warning: filemtime(): Stat failed for ./albums/edit/. (errno=13 - Permission denied) in  (path) upload.php on line 440
Warning: unlink(./albums/edit/.): Permission denied in (path) upload.php line 453

Appears 2x's in the actual html page.

I understand there are security problems with 1.3.2 - XSS .  Is this part of the problem?  Not very adept at PHP - any help would be appreciated

Thanks,
Ken

haat

Dumbass - I fixed it.  Somehow permissions were changed on the edit directory.  Dohhhh!

-ken

Nibbler

Updating to 1.3.3 will stop this from happening again, however it is unrelated to the XSS issue.