Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: Edit more that 25 Pics  (Read 3789 times)

0 Members and 1 Guest are viewing this topic.

phatbloke

  • Coppermine novice
  • *
  • Offline Offline
  • Posts: 20
Edit more that 25 Pics
« on: August 27, 2005, 02:32:55 am »

Hi

I have come accross this bug which I can replicate on my server and hopefully someone else can verify it happens to them as well.

I have applied the fix from http://forum.coppermine-gallery.net/index.php?topic=17802.0 sucessfully.

Basically I can edit captions in albums as long as there are 25 or less pictures in that album as soon as there are more creating effectivly 2 pages i get the "Permission denied" error and I get completely logged out of the system and have to log in again. Any less and editing works perfectly. I have tried allowing all the images to be displayed (ie setting option to display 50 images per page) but with no luck.

Can someone else verify if this happens to them or it is an isolated case.
« Last Edit: August 30, 2005, 08:19:32 pm by Nibbler »
Logged

Nibbler

  • Guest
Re: Edit more that 25 Pics
« Reply #1 on: August 27, 2005, 02:43:18 am »

Works fine for me. Is this with the Xoops bridge ?
Logged

phatbloke

  • Coppermine novice
  • *
  • Offline Offline
  • Posts: 20
Re: Edit more that 25 Pics
« Reply #2 on: August 27, 2005, 03:10:26 am »

Yes it is but I have tried it with it both it enabled and disabled. I have also done a new install for testing and it came up with the same erorr. Must be something with my server. Thanks
Logged

Nibbler

  • Guest
Re: Edit more that 25 Pics
« Reply #3 on: August 27, 2005, 03:12:52 am »

If you are happy to let me play with your server you can PM me FTP details.
Logged

Nibbler

  • Guest
Re: Edit more that 25 Pics
« Reply #4 on: August 27, 2005, 04:46:48 am »

Bug confirmed. Assigning to me.
Logged

Nibbler

  • Guest
Re: Edit more that 25 Pics
« Reply #5 on: August 30, 2005, 07:38:01 pm »

I found the explanation for this. The server is running "Hardened PHP" and is configured with a "varfilter.max_request_variables" setting of 200. If you send the server more than 200 request variables in one go it silently drops any data over this limit. With Coppermine, the editpics form is sending 9+ variables per pic so you encounter this limit at just over 20 pics (depending on how many boxes you tick). When this happens, the cookie data is silently dropped, logging you out.

The solution of course is to increase this limit where possible.

We could however add a lower option (10 perhaps)  to the editpics 'Number of files to display' dropdown (currently 25/50/75/100). Is this worth doing ?
Logged

phatbloke

  • Coppermine novice
  • *
  • Offline Offline
  • Posts: 20
Re: Edit more that 25 Pics
« Reply #6 on: August 31, 2005, 04:15:03 am »

Thankyou heaps for finding this nibbler
I wouldn't have known where to start myself.
I have now upped the setting to 300 and works fine for editing the default 25 pictures which is all i require although the 10 picture setting might be a good idea incase other people use the hardend php even though it is easy to adjust if the user has rights to the server.
Logged
Pages: [1]   Go Up
 

Page created in 0.015 seconds with 18 queries.