Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: [Solved]: Can't save new configuration  (Read 5878 times)

0 Members and 1 Guest are viewing this topic.

ullielfan

  • Coppermine newbie
  • Offline Offline
  • Posts: 4
[Solved]: Can't save new configuration
« on: February 07, 2009, 05:58:06 pm »

Everytime I click on "save new configuration", it just leads me to a strange page and doesn't save any changes. Here is the source codes of that page.

Code: [Select]

<form action='/pix/admin.php' method='POST'><input type='text' name='login'><br/><input name='pass' type='password'><br /><input type='submit' value='authenticate'></form>


Coppermine version is 1.4.19 , gallery url is http://www.j-marsden.com/pix
« Last Edit: February 08, 2009, 03:18:24 pm by Nibbler »
Logged

Nibbler

  • Guest
Re: Can't save new configuration
« Reply #1 on: February 07, 2009, 06:38:09 pm »

You need to update to 1.4.20. That will probably fix this issue also.
Logged

ullielfan

  • Coppermine newbie
  • Offline Offline
  • Posts: 4
Re: Can't save new configuration
« Reply #2 on: February 07, 2009, 06:58:07 pm »

Upgraded to 1.4.20 with modpack 1.4.19, but the problem still remains.
Logged

czyrkr

  • Coppermine newbie
  • Offline Offline
  • Posts: 3
Re: Can't save new configuration
« Reply #3 on: February 08, 2009, 03:09:40 am »

I have the same problem.

Few days ago I realized that my web site was hacked. I found some hidden files and hidden text in my cpg. I was running version 1.4.14 . I couldn't save new configuration. Now I updated to version 1.4.20 and I still cannot save configuration. It just sends me to Authentication page where I enter my Login info and.... Noting happens I get blank page admin.php. When I refresh it takes me back to admin.php which is that same configuration file but with the same configuration as before. Any help or suggestions will be appreciated.
Logged

Aeronautic

  • Coppermine frequent poster
  • ***
  • Country: 00
  • Offline Offline
  • Posts: 125
  • Photographer / film maker turned webmeister...
Re: Can't save new configuration
« Reply #4 on: February 08, 2009, 04:48:04 am »

Upgraded to 1.4.20 with modpack 1.4.19, but the problem still remains.


I may be completely wrong here but I think modpack is version specific. By adding modpack 1.4.19 after you upgraded to cpg 1.4.20 you overwrote some of those upgraded files with files of the same name but earlier version.

Devs?

Logged

ullielfan

  • Coppermine newbie
  • Offline Offline
  • Posts: 4
Re: Can't save new configuration
« Reply #5 on: February 08, 2009, 06:46:33 am »

I noticed something like
Code: [Select]
<?php /**/eval(base64_decode(...... has been written into my config.inc.php file. Just deleted it, and my gallery seems to work fine now. ;D
Logged

czyrkr

  • Coppermine newbie
  • Offline Offline
  • Posts: 3
Re: Can't save new configuration
« Reply #6 on: February 08, 2009, 12:58:07 pm »

Code: [Select]
<?php /**/eval(base64_decode(......Yes that was the case with my gallery as well. It works now. Thank you.
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Re: [Solved]: Can't save new configuration
« Reply #7 on: February 13, 2009, 09:15:25 am »

Means that you have been subject of a hacking attempt. Clear your gallery thoroughly - just cleaning include/config.inc.php might not be enough, the attacker might have left other payload or backdoors behind!
Logged

czyrkr

  • Coppermine newbie
  • Offline Offline
  • Posts: 3
Re: [Solved]: Can't save new configuration
« Reply #8 on: February 15, 2009, 01:15:14 am »

Means that you have been subject of a hacking attempt. Clear your gallery thoroughly - just cleaning include/config.inc.php might not be enough, the attacker might have left other payload or backdoors behind!


What is your suggestion? Should I delete all files and reinstall the whole gallery?
Logged

Fabricio Ferrero

  • Dev Team member
  • Coppermine addict
  • ****
  • Country: 00
  • Offline Offline
  • Gender: Male
  • Posts: 1996
  • From San Juan, Argentina, to the World!
    • http://fabricioferrero.com/
Logged
Read Docs and Search the Forum before posting. - Soporte en español
--*--
Fabricio Ferrero's Website

Catching up! :)

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Re: [Solved]: Can't save new configuration
« Reply #10 on: February 17, 2009, 12:24:54 pm »

Should I delete all files and reinstall the whole gallery?
No.

Read: Yikes, I've been hacked! Now what? ;)
Exactly! The only recommended solution is being explained in that thread.
Logged

thehau

  • Coppermine newbie
  • Offline Offline
  • Posts: 2
Re: [Solved]: Can't save new configuration
« Reply #11 on: April 30, 2009, 07:40:32 pm »

I decoded the string and it came up with something from joomla, which I did install. 
Logged

thehau

  • Coppermine newbie
  • Offline Offline
  • Posts: 2
Re: [Solved]: Can't save new configuration
« Reply #12 on: April 30, 2009, 07:43:15 pm »

Sorry hit Post too early.

Good news is that my site hasn't been compromised, a good online base64 decoder is here:

http://www.motobit.com/util/base64-decoder-encoder.asp

On the safe side, I did upgrade to the latest version of coppermine.
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Re: [Solved]: Can't save new configuration
« Reply #13 on: May 01, 2009, 11:59:46 pm »

Locking
Logged
Pages: [1]   Go Up
 

Page created in 0.043 seconds with 20 queries.