[Solved]: Why can guests upload? [Solved]: Why can guests upload?
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

[Solved]: Why can guests upload?

Started by forummaker, July 22, 2008, 04:05:36 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

forummaker

I'm not sure why guests can upload. I have the following permissions set in "Groups">"Guests"> everything set to "No".
The albums are all set to "Yes" for visitors. I do understand that guests and visitors are different.
I've even tried to set "Guests" upload kb size to 1kb. That didn't work. It still allows for larger uploads.
Any help with this would be greatly appreciated. I'm losing my hair. Thanks.
Link to site: http://www.remedydog.com/coppermine
Remedydog.com
Where dogs would go if they could talk

Joachim Müller

Attach a screenshot of your groups page to your next posting here.

forummaker

Here is a screen shot. Thank you.
Remedydog.com
Where dogs would go if they could talk

Nibbler

Can you replicate this with bridging disabled?

forummaker

are you asking me to disable bridging to see if I have the same problem?
Remedydog.com
Where dogs would go if they could talk


forummaker

after I disabled bridging it does not allow guests the option to upload a file, the "upload file" link isn't  there anymore for guests to see. what should I do next? thanks.
Remedydog.com
Where dogs would go if they could talk

Nibbler

Maybe the bridge doesn't work properly with TinyPortal.

forummaker

So now what? I don't think I'm the only one using tiny portal with coppermine. I've searched and can't find anyone with this same issue. I did find this though and made the change, but it didn't fix my problem. http://forum.coppermine-gallery.net/index.php/topic,46477.0.html Thanks.
Remedydog.com
Where dogs would go if they could talk

Joachim Müller

The SMF bridge has been created for SMF. If it works with TinyPortal, then fine. If it doesn't, you'll have to create a separate bridge for TinyPortal.

forummaker

I've searched for bridging with tiny portal and couldn't find any useful information that would help me with my problem. Has a bridge been made for tiny portal? I hope this isn't a point where I have to make a decision, keep tiny portal or coppermine. Thanks for all your help so far, and can you direct me where to go next? Thanks.
Remedydog.com
Where dogs would go if they could talk

Joachim Müller

Quote from: forummaker on July 23, 2008, 11:57:31 AM
Has a bridge been made for tiny portal?
No, that's what I said above: there is no bridge particularly for TinyPortal - you're the first to report issues with it.

forummaker

What is the determining factor that this is definitely a tiny portal issue?
Remedydog.com
Where dogs would go if they could talk

forummaker

What if I changed something in the code (not sure where), that the "Upload File" link would only show up to members who are logged in? Could this be possible?
Remedydog.com
Where dogs would go if they could talk

Nibbler

Your configuration already does that. The issue seems to be that the bridge does not correctly recognize anonymous users. Enable debug mode for all in config and post the output you get when not logged in.

forummaker

#15
Here ya go. Thanks. This is the log when I'm logged out. Still says "USER"?


USER:
------------------
Array
(
    [ID] => (numbers deleted)
    [am] => 1
    [lang] => english
    [liv] => Array
        (
            [0] => 29
        )

)

==========================
USER DATA:
------------------
Array
(
    [user_id] =>
    [user_name] =>
    [groups] => Array
        (
            [0] => 2
        )

    [disk_max] => 10000
    [disk_min] => 10000
    [can_rate_pictures] => 1
    [can_send_ecards] => 1
    [ufc_max] => 3
    [ufc_min] => 3
    [custom_user_upload] => 0
    [num_file_upload] => 3
    [num_URI_upload] => 1
    [can_post_comments] => 1
    [can_upload_pictures] => 1
    [can_create_albums] => 0
    [has_admin_access] => 0
    [pub_upl_need_approval] => 0
    [priv_upl_need_approval] => 0
    [group_name] => Registered
    [upload_form_config] => 3
    [group_quota] => 10000
    [can_see_all_albums] => 0
    [group_id] => 2
)

==========================
Queries:
------------------
Array
(
    [0] => SELECT extension, mime, content, player FROM cpg14x_filetypes; (0.001s)
    [1] => select * from cpg14x_plugins order by priority asc; (0s)
    [2] => SELECT * FROM cpg14x_bridge (0s)
    [3] => SELECT MAX(group_quota) as disk_max, MIN(group_quota) as disk_min, MAX(can_rate_pictures) as can_rate_pictures, MAX(can_send_ecards) as can_send_ecards, MAX(upload_form_config) as ufc_max, MIN(upload_form_config) as ufc_min, MAX(custom_user_upload) as custom_user_upload, MAX(num_file_upload) as num_file_upload, MAX(num_URI_upload) as num_URI_upload, MAX(can_post_comments) as can_post_comments, MAX(can_upload_pictures) as can_upload_pictures, MAX(can_create_albums) as can_create_albums, MAX(has_admin_access) as has_admin_access, MIN(pub_upl_need_approval) as pub_upl_need_approval, MIN( priv_upl_need_approval) as  priv_upl_need_approval FROM cpg14x_usergroups WHERE group_id in (2) (0.001s)
    [4] => SELECT group_name FROM  cpg14x_usergroups WHERE group_id= 2 (0s)
    [5] => SELECT * FROM cpg14x_final_extract_config (0.001s)
    [6] => DELETE FROM cpg14x_banned WHERE expiry < '2008-07-24 09:54:27' (0s)
    [7] => SELECT * FROM cpg14x_banned WHERE (ip_addr='68.30.218.96' OR ip_addr='68.30.218.96' OR user_id=0) AND brute_force=0 (0s)
    [8] => SELECT aid FROM cpg14x_albums (0s)
    [9] => SELECT cid, name, description, thumb FROM cpg14x_categories WHERE parent = ''  ORDER BY pos (0s)
    [10] => SELECT aid FROM cpg14x_albums as a WHERE category>=10000 (0.001s)
    [11] => SELECT count(*) FROM cpg14x_pictures as p, cpg14x_albums as a WHERE p.aid = a.aid AND approved='YES' AND category >= 10000 (0s)
    [12] => SELECT cid, name, description, thumb FROM cpg14x_categories WHERE parent = '1'  ORDER BY pos (0s)
    [13] => SELECT aid FROM cpg14x_albums as a WHERE category = '0' (0s)
    [14] => SELECT count(*) FROM cpg14x_albums as a WHERE 1 (0.001s)
    [15] => SELECT count(*) FROM cpg14x_pictures as p LEFT JOIN cpg14x_albums as a ON a.aid=p.aid WHERE 1 AND approved='YES' (0.001s)
    [16] => SELECT count(*) FROM cpg14x_comments as c LEFT JOIN cpg14x_pictures as p ON c.pid=p.pid LEFT JOIN cpg14x_albums as a ON a.aid=p.aid WHERE 1 (0s)
    [17] => SELECT count(*) FROM cpg14x_categories WHERE 1 (0s)
    [18] => SELECT sum(hits) FROM cpg14x_pictures as p LEFT JOIN cpg14x_albums as a ON p.aid=a.aid WHERE 1 (0.001s)
    [19] => SELECT count(*) FROM cpg14x_albums as a WHERE category = '0' (0.001s)
    [20] => SELECT a.aid, a.title, a.description, category, visibility, filepath, filename, url_prefix, pwidth, pheight FROM cpg14x_albums as a LEFT JOIN cpg14x_pictures as p ON a.thumb=p.pid WHERE category=0 ORDER BY a.pos LIMIT 0,3 (0.001s)
    [21] => SELECT a.aid, count( p.pid )  AS pic_count, max( p.pid )  AS last_pid, max( p.ctime )  AS last_upload, a.keyword FROM cpg14x_albums AS a  LEFT JOIN cpg14x_pictures AS p ON a.aid = p.aid AND p.approved =  'YES' WHERE a.aid IN (3, 7, 8)GROUP BY a.aid (0.001s)
    [22] => SELECT filepath, filename, url_prefix, pwidth, pheight FROM cpg14x_pictures WHERE pid='5' (0s)
    [23] => SELECT filepath, filename, url_prefix, pwidth, pheight FROM cpg14x_pictures WHERE pid='23' (0.001s)
    [24] => SELECT filepath, filename, url_prefix, pwidth, pheight FROM cpg14x_pictures WHERE pid='21' (0.001s)
    [25] => SELECT COUNT(*) from cpg14x_pictures WHERE approved = 'YES' AND aid IN (3,4,5,7,8,10,11)  (0.001s)
    [26] => SELECT * FROM cpg14x_pictures WHERE approved = 'YES' AND aid IN (3,4,5,7,8,10,11)  ORDER BY pid DESC  LIMIT 0 ,8 (0.001s)
    [27] => SELECT count(*) from cpg14x_comments where pid=29 and msg_id!=0 (0.001s)
    [28] => SELECT count(*) from cpg14x_comments where pid=23 and msg_id!=0 (0s)
    [29] => SELECT count(*) from cpg14x_comments where pid=21 and msg_id!=0 (0s)
    [30] => SELECT count(*) from cpg14x_comments where pid=20 and msg_id!=0 (0s)
    [31] => SELECT count(*) from cpg14x_comments where pid=19 and msg_id!=0 (0s)
    [32] => SELECT count(*) from cpg14x_comments where pid=18 and msg_id!=0 (0s)
    [33] => SELECT count(*) from cpg14x_comments where pid=17 and msg_id!=0 (0s)
    [34] => SELECT count(*) from cpg14x_comments where pid=16 and msg_id!=0 (0s)
    [35] => SELECT COUNT(*) from cpg14x_pictures WHERE approved = 'YES' AND hits > 0  AND aid IN (3,4,5,7,8,10,11)   (0.001s)
    [36] => SELECT * FROM cpg14x_pictures WHERE approved = 'YES'AND hits > 0 AND aid IN (3,4,5,7,8,10,11)   ORDER BY hits DESC, filename   LIMIT 0 ,8 (0.001s)
    [37] => SELECT count(*) from cpg14x_comments where pid=4 and msg_id!=0 (0s)
    [38] => SELECT count(*) from cpg14x_comments where pid=5 and msg_id!=0 (0s)
    [39] => SELECT count(*) from cpg14x_comments where pid=6 and msg_id!=0 (0s)
    [40] => SELECT count(*) from cpg14x_comments where pid=10 and msg_id!=0 (0s)
    [41] => SELECT count(*) from cpg14x_comments where pid=8 and msg_id!=0 (0s)
    [42] => SELECT count(*) from cpg14x_comments where pid=12 and msg_id!=0 (0s)
    [43] => SELECT count(*) from cpg14x_comments where pid=9 and msg_id!=0 (0s)
    [44] => SELECT count(*) from cpg14x_comments where pid=15 and msg_id!=0 (0s)
    [45] => SELECT COUNT(*) from cpg14x_pictures WHERE approved = 'YES' AND votes >= '1' AND aid IN (3,4,5,7,8,10,11)  (0.001s)
    [46] => SELECT * FROM cpg14x_pictures WHERE approved = 'YES' AND votes >= '1' AND aid IN (3,4,5,7,8,10,11)  ORDER BY pic_rating DESC, votes DESC, pid DESC  LIMIT 0 ,8 (0.001s)
)

==========================
GET :
------------------
Array
(
    [e] =>
)

==========================
POST :
------------------
Array
(
)

==========================
Page generated in 0.19 seconds - 47 queries in 0.019 seconds - Album set : ; Meta set: AND aid IN (3,4,5,7,8,10,11) ;
Remedydog.com
Where dogs would go if they could talk

Nibbler

Try changing

if (!$user_settings){

to

if (empty($user_settings['ID_MEMBER'])){

in the bridge file.

forummaker

"SOLVED" That did the trick Nibbler. Thank you so much, your the best.
Remedydog.com
Where dogs would go if they could talk