Print

[bomby]

Hi, I have a problem with my gallery. First of all, sorry for my english, it's not my first language.
When I have to upload a folder, if there are few pictures I have no problem, but if there are several pictures, after choosing the destination album, when I click to put them there, I am suddenly log-out and it tells me that I don't have permissions to do it. I tried several times, with no better luck.

After doing what suggested here, I tried again, and this is what came out:
File: /home/web/www.suddenly-something.com/www/rmi/gallery/searchnew.php - Linea: 26

I think line 26 is this one:

Code: [Select]

if (!GALLERY_ADMIN_MODE) cpg_die(ERROR, $lang_errors['access_denied'], __FILE__, __LINE__);

[bomby]

sorry for the double post, I did something wrong with the code and can't find the edit button


This is what there is on the Debug section:

Code: [Select]

USER:
------------------
Array
(
    [ID] => a7ad4f9c1f13fab6748a9e9eda6099d0
    [am] => 1
    [lang] => italian
)

==========================
USER DATA:
------------------
Array
(
    [user_id] => 0
    [user_name] => Guest
    [groups] => Array
        (
            [0] => 3
        )

    [group_quota] => 0
    [can_rate_pictures] => 1
    [can_send_ecards] => 0
    [can_post_comments] => 0
    [can_upload_pictures] => 0
    [can_create_albums] => 0
    [pub_upl_need_approval] => 1
    [priv_upl_need_approval] => 1
    [upload_form_config] => 0
    [num_file_upload] => 1
    [num_URI_upload] => 0
    [custom_user_upload] => 0
    [disk_max] => 0
    [disk_min] => 0
    [ufc_max] => 0
    [ufc_min] => 0
    [has_admin_access] => 0
    [group_name] => Guests
    [can_see_all_albums] => 0
    [group_id] => 3
)

==========================
Queries:
------------------
Array
(
    [0] => SELECT extension, mime, content, player FROM cpg14x_filetypes; (0s)
    [1] => select * from cpg14x_plugins order by priority asc; (0s)
    [2] => delete from `suddenly-somethi-rmi`.cpg14x_sessions where time<1220293348 and remember=0; (0s)
    [3] => delete from `suddenly-somethi-rmi`.cpg14x_sessions where time<1219087348; (0s)
    [4] => SELECT session_id FROM `suddenly-somethi-rmi`.cpg14x_sessions WHERE session_id = 'cc54531662ac2c8ca2a91e2e235ba0ed' (0s)
    [5] => insert into `suddenly-somethi-rmi`.cpg14x_sessions (session_id, user_id, time, remember) values ("cc54531662ac2c8ca2a91e2e235ba0ed", 0, "1220296948", 0); (0s)
    [6] => SELECT MAX(group_quota) as disk_max, MIN(group_quota) as disk_min, MAX(can_rate_pictures) as can_rate_pictures, MAX(can_send_ecards) as can_send_ecards, MAX(upload_form_config) as ufc_max, MIN(upload_form_config) as ufc_min, MAX(custom_user_upload) as custom_user_upload, MAX(num_file_upload) as num_file_upload, MAX(num_URI_upload) as num_URI_upload, MAX(can_post_comments) as can_post_comments, MAX(can_upload_pictures) as can_upload_pictures, MAX(can_create_albums) as can_create_albums, MAX(has_admin_access) as has_admin_access, MIN(pub_upl_need_approval) as pub_upl_need_approval, MIN( priv_upl_need_approval) as  priv_upl_need_approval FROM cpg14x_usergroups WHERE group_id in (3) (0s)
    [7] => SELECT group_name FROM  cpg14x_usergroups WHERE group_id= 3 (0s)
    [8] => update `suddenly-somethi-rmi`.cpg14x_sessions set time='1220296948' where session_id = 'cc54531662ac2c8ca2a91e2e235ba0ed' (0s)
    [9] => DELETE FROM cpg14x_banned WHERE expiry < '2008-09-01 19:22:31' (0s)
    [10] => SELECT * FROM cpg14x_banned WHERE (ip_addr='79.42.133.79' OR ip_addr='79.42.133.79' OR user_id=0) AND brute_force=0 (0s)
    [11] => SELECT aid, category FROM cpg14x_albums WHERE visibility != '0' AND visibility !='10000' AND visibility NOT IN (3) (0s)
)

==========================
GET :
------------------
Array
(
    [insert] => 1
)

==========================
POST :
------------------
Array
(
    [d0000] => 26
    [pics] => Array
        (
            [0] => i0000
            [1] => i0001
            [2] => i0002
            [3] => i0003
            [4] => i0004
            [5] => i0005
            [6] => i0006
            [7] => i0007
            [8] => i0008
            [9] => i0009
            [10] => i0010
            [11] => i0011
            [12] => i0012
            [13] => i0013
            [14] => i0014
            [15] => i0015
            [16] => i0016
            [17] => i0017
            [18] => i0018
            [19] => i0019
            [20] => i0020
            [21] => i0021
            [22] => i0022
            [23] => i0023
            [24] => i0024
            [25] => i0025
            [26] => i0026
            [27] => i0027
            [28] => i0028
            [29] => i0029
            [30] => i0030
            [31] => i0031
            [32] => i0032
            [33] => i0033
            [34] => i0034
            [35] => i0035
            [36] => i0036
            [37] => i0037
            [38] => i0038
            [39] => i0039
            [40] => i0040
            [41] => i0041
            [42] => i0042
            [43] => i0043
            [44] => i0044
            [45] => i0045
            [46] => i0046
            [47] => i0047
            [48] => i0048
            [49] => i0049
            [50] => i0050
            [51] => i0051
            [52] => i0052
            [53] => i0053
            [54] => i0054
            [55] => i0055
            [56] => i0056
            [57] => i0057
            [58] => i0058
            [59] => i0059
            [60] => i0060
            [61] => i0061
            [62] => i0062
            [63] => i0063
            [64] => i0064
            [65] => i0065
        )

    [album_lb_id_i0000] => d0000
    [picfile_i0000] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDAwLmpwZw==
    [album_lb_id_i0001] => d0000
    [picfile_i0001] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDAxLmpwZw==
    [album_lb_id_i0002] => d0000
    [picfile_i0002] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDAzLmpwZw==
    [album_lb_id_i0003] => d0000
    [picfile_i0003] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDExLmpwZw==
    [album_lb_id_i0004] => d0000
    [picfile_i0004] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDEyLmpwZw==
    [album_lb_id_i0005] => d0000
    [picfile_i0005] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDE5LmpwZw==
    [album_lb_id_i0006] => d0000
    [picfile_i0006] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDIwLmpwZw==
    [album_lb_id_i0007] => d0000
    [picfile_i0007] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDIxLmpwZw==
    [album_lb_id_i0008] => d0000
    [picfile_i0008] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDI0LmpwZw==
    [album_lb_id_i0009] => d0000
    [picfile_i0009] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDI4LmpwZw==
    [album_lb_id_i0010] => d0000
    [picfile_i0010] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDI5LmpwZw==
    [album_lb_id_i0011] => d0000
    [picfile_i0011] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDMwLmpwZw==
    [album_lb_id_i0012] => d0000
    [picfile_i0012] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDMxLmpwZw==
    [album_lb_id_i0013] => d0000
    [picfile_i0013] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDMyLmpwZw==
    [album_lb_id_i0014] => d0000
    [picfile_i0014] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDM1LmpwZw==
    [album_lb_id_i0015] => d0000
    [picfile_i0015] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDM2LmpwZw==
    [album_lb_id_i0016] => d0000
    [picfile_i0016] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDQ2LmpwZw==
    [album_lb_id_i0017] => d0000
    [picfile_i0017] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDQ3LmpwZw==
    [album_lb_id_i0018] => d0000
    [picfile_i0018] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDUzLmpwZw==
    [album_lb_id_i0019] => d0000
    [picfile_i0019] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDU0LmpwZw==
    [album_lb_id_i0020] => d0000
    [picfile_i0020] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDU1LmpwZw==
    [album_lb_id_i0021] => d0000
    [picfile_i0021] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDU2LmpwZw==
    [album_lb_id_i0022] => d0000
    [picfile_i0022] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDU3LmpwZw==
    [album_lb_id_i0023] => d0000
    [picfile_i0023] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDU4LmpwZw==
    [album_lb_id_i0024] => d0000
    [picfile_i0024] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDU5LmpwZw==
    [album_lb_id_i0025] => d0000
    [picfile_i0025] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDYwLmpwZw==
    [album_lb_id_i0026] => d0000
    [picfile_i0026] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDYxLmpwZw==
    [album_lb_id_i0027] => d0000
    [picfile_i0027] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDYyLmpwZw==
    [album_lb_id_i0028] => d0000
    [picfile_i0028] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDY0LmpwZw==
    [album_lb_id_i0029] => d0000
    [picfile_i0029] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDY3LmpwZw==
    [album_lb_id_i0030] => d0000
    [picfile_i0030] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDY4LmpwZw==
    [album_lb_id_i0031] => d0000
    [picfile_i0031] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDcwLmpwZw==
    [album_lb_id_i0032] => d0000
    [picfile_i0032] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDcxLmpwZw==
    [album_lb_id_i0033] => d0000
    [picfile_i0033] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDczLmpwZw==
    [album_lb_id_i0034] => d0000
    [picfile_i0034] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDc1LmpwZw==
    [album_lb_id_i0035] => d0000
    [picfile_i0035] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDc2LmpwZw==
    [album_lb_id_i0036] => d0000
    [picfile_i0036] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDc3LmpwZw==
    [album_lb_id_i0037] => d0000
    [picfile_i0037] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDc4LmpwZw==
    [album_lb_id_i0038] => d0000
    [picfile_i0038] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDc5LmpwZw==
    [album_lb_id_i0039] => d0000
    [picfile_i0039] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDgwLmpwZw==
    [album_lb_id_i0040] => d0000
    [picfile_i0040] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDgxLmpwZw==
    [album_lb_id_i0041] => d0000
    [picfile_i0041] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDgyLmpwZw==
    [album_lb_id_i0042] => d0000
    [picfile_i0042] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDgzLmpwZw==
    [album_lb_id_i0043] => d0000
    [picfile_i0043] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDg0LmpwZw==
    [album_lb_id_i0044] => d0000
    [picfile_i0044] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDg1LmpwZw==
    [album_lb_id_i0045] => d0000
    [picfile_i0045] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDg2LmpwZw==
    [album_lb_id_i0046] => d0000
    [picfile_i0046] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDg3LmpwZw==
    [album_lb_id_i0047] => d0000
    [picfile_i0047] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMDg4LmpwZw==
    [album_lb_id_i0048] => d0000
    [picfile_i0048] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMTAwLmpwZw==
    [album_lb_id_i0049] => d0000
    [picfile_i0049] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMTAxLmpwZw==
    [album_lb_id_i0050] => d0000
    [picfile_i0050] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMTAzLmpwZw==
    [album_lb_id_i0051] => d0000
    [picfile_i0051] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMTA0LmpwZw==
    [album_lb_id_i0052] => d0000
    [picfile_i0052] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMTA1LmpwZw==
    [album_lb_id_i0053] => d0000
    [picfile_i0053] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMTA2LmpwZw==
    [album_lb_id_i0054] => d0000
    [picfile_i0054] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMTA4LmpwZw==
    [album_lb_id_i0055] => d0000
    [picfile_i0055] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMTA5LmpwZw==
    [album_lb_id_i0056] => d0000
    [picfile_i0056] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMTExLmpwZw==
    [album_lb_id_i0057] => d0000
    [picfile_i0057] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMTEyLmpwZw==
    [album_lb_id_i0058] => d0000
    [picfile_i0058] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMTEzLmpwZw==
    [album_lb_id_i0059] => d0000
    [picfile_i0059] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMTE0LmpwZw==
    [album_lb_id_i0060] => d0000
    [picfile_i0060] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMTE1LmpwZw==
    [album_lb_id_i0061] => d0000
    [picfile_i0061] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMTE2LmpwZw==
    [album_lb_id_i0062] => d0000
    [picfile_i0062] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMTE3LmpwZw==
    [album_lb_id_i0063] => d0000
    [picfile_i0063] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMTE4LmpwZw==
    [album_lb_id_i0064] => d0000
    [picfile_i0064] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMTIwLmpwZw==
    [album_lb_id_i0065] => d0000
    [picfile_i0065] => dXBsb2Fkcy9tb3ZpZXMvcmVkX2V5ZV9zY3JlZW4vREQzMTIxLmpwZw==
)

==========================
Page generated in 2.81 seconds - 12 queries in 0 seconds - Album set : ; Meta set: ;
I created an username, as suggested, even if I don't think it will help, because normal file upload works well:
user: test
pass: prova

My Gallery:
http://suddenly-something.com/rmi/gallery

What can I do??

[Joachim Müller]

You're not suppsoed to post the debug_ouput!

After doing what suggested here

You haven't done as suggested. Re-read the section "asking for support on upload issues"!

Link to your gallery is http://www.suddenly-something.com/rmi/gallery/

There is something fishy with your theme setup. Also, you need to upgrade.

[bomby]

Sorry about posting the debug, I knew I wasn't supposed to do it, but I read that it could have been asked and I didn't know if I could have been online, so I thought that I could make it easier by posting it right away. Again, sorry about it, I made a mistake
I think I did all the other steps right, I changed the "Maintenance settings" , the "gropus" ones and created the new user, did I miss something else? I also checked the "Error messages" there, but there wasn't anything like the one I have.

I don't know what could possibly be wrong with the theme, I didn't touch it, it should be the 'classic' one.

I've just upgraded to 1.4.19, but the problem is still there 

I found out that the same problem aslo happens when I try to modify more files on an album, logout and error message:
File: /home/web/www.suddenly-something.com/www/tomkat_gallery/editpics.php - Linea: 25

[Joachim Müller]

Regular http upload works as expected (see http://www.suddenly-something.com/rmi/gallery/displayimage.php?pos=-80). Post a deep link to one of the files you're having troubles with when batch-adding.

[bomby]

Post a deep link to one of the files you're having troubles with when batch-adding.

Is this ok?
http://www.suddenly-something.com/rmi/gallery/albums/uploads/movies/single_screen/single_screen189406.jpg

[Joachim Müller]

Yes, looks fine. Can you temporarily allow the browsing of folders on the webserver by turning indexes off? Thanks.

[bomby]

 ... I don't know if I understood what you asked, I think I did it, but I'm not sure...I deleted the index files on both the gallery and the main site

[Joachim Müller]

No, you're not supposed to delete index files - put them back.
What I wasked for was the setting

Code: [Select]

Options -Indexesin your .htaccess file. What this will do: currently, when you go to a folder that doesn't contain an index file, you don't get a list of files that reside in that folder, but a permission denied error message. This behaviour of the webserver is fine under normal circumstances. But I want you to turn that temporarily off, so I can browse your albums folder with the web browser.

[bomby]

I can't find the .htaccess file anywhere, even if I try to show invisible files, it's not there

[bomby]

I tried to install another gallery to the site, to see if it would work, and I have the same problem again.
The strange theme is probably the Modpack's faoult, because in this gallery the theme was ok until I used it, then it went strange like in the other gallery, and went back to normal as soon as I deleted the modpack files to put the orignal ones back

[Joachim Müller]

You never mentioned before that you're using the modpack (you should have done so). I have no idea how the modpack works or how much the upload code differs, so I'm out of this thread.

[bomby]

the problem does not depend from the modpack, as I was saying, the upload doesn't work either way.
I guess I'll just have to give the gallery up, thanks anyway for trying

[bomby]

sorry to bring this up again, but I have one question and I didn't want to open a new topic about it. Still trying to solve this problem, I asked my host to change the parametres on php.ini as sugggested here, but they refused saying that that change will make very easy for an hacker use a mysql injection and delete all my work, is that true?

[Nibbler]

No. Review existing threads that discus 'suhosin' and see if they apply to you too.

[bomby]

will do, thank you for the quick answer