Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: version  (Read 5124 times)

0 Members and 1 Guest are viewing this topic.

amberracing

  • Coppermine newbie
  • Offline Offline
  • Posts: 19
version
« on: August 10, 2009, 05:39:07 pm »

How do I find out what version of coppermine I have on my server. For some reason the pics are not loading and I have been told that I need to upload updates. I don't know which updates to upload.
Logged

Nibbler

  • Guest
Re: version
« Reply #1 on: August 10, 2009, 05:45:00 pm »

The documentation has the version number, as does the version check tool, as does the configuration page and the HTML output of the gallery. If none of those help you post a link.
Logged

amberracing

  • Coppermine newbie
  • Offline Offline
  • Posts: 19
Re: version
« Reply #2 on: August 10, 2009, 05:51:44 pm »

the website I am posting about is www.amberracing.com click on photos link and you will see the problem.
Logged

amberracing

  • Coppermine newbie
  • Offline Offline
  • Posts: 19
Re: version
« Reply #3 on: August 10, 2009, 05:54:53 pm »

also I have clicked on the "forgot password" link on the login of the gallery and it says that it has sent my password but it never sends anything.
Logged

onthepike

  • Guest
Re: version
« Reply #4 on: August 10, 2009, 06:11:18 pm »

You appear to be running CPG version 1.4.14 and are behind in updates. But you have additional problems, I see:

http://amberracing.com/coppermine/index.php

Your pictures do not display.
Logged

Nibbler

  • Guest
Re: version
« Reply #5 on: August 10, 2009, 06:13:05 pm »

You are using 1.4.14 and you were hacked due to not keeping up to date. That's why all your images are not being displayed.

See http://forum.coppermine-gallery.net/index.php/topic,51927.0.html for how to clean up your gallery. If you forgot your admin password then search the forum for instructions on how to retrieve it.
Logged

amberracing

  • Coppermine newbie
  • Offline Offline
  • Posts: 19
Re: version
« Reply #6 on: August 10, 2009, 06:14:09 pm »

where do I get the updates for that verion and how do I get the pics to show again? They worked for over a year.
Logged

Nibbler

  • Guest
Re: version
« Reply #7 on: August 10, 2009, 06:15:13 pm »

Read the thread I posted.
Logged

amberracing

  • Coppermine newbie
  • Offline Offline
  • Posts: 19
Re: version
« Reply #8 on: August 10, 2009, 06:15:40 pm »

I tried the reteaval and it does not send me the password
Logged

Nibbler

  • Guest
Re: version
« Reply #9 on: August 10, 2009, 06:16:32 pm »

Please stop posting until you have done as suggested. Read the thread and search the forums.
Logged

onthepike

  • Guest
Re: version
« Reply #10 on: August 10, 2009, 06:24:27 pm »

It may or may not have been hacked. Multiple scanners don't prove any malicious code, but that's not definitive in any way. It could have been hacked nonetheless.

However, I did notice a 301 redirect to google.com which may either be a hack or an error in the .htaccess file. There are plenty of "htaccess cheat sheets" out there and perhaps this is a case of good intentions gone wrong :-)

I would surely update, no question. However, I'd also refer to any .htaccess file to verify the redirect and correct there first.
Logged

amberracing

  • Coppermine newbie
  • Offline Offline
  • Posts: 19
Re: version
« Reply #11 on: August 10, 2009, 06:25:34 pm »

but I cannot put the gallery in maintenance mode because I cannot log into the gallery as admin
Logged

amberracing

  • Coppermine newbie
  • Offline Offline
  • Posts: 19
Re: version
« Reply #12 on: August 10, 2009, 06:27:49 pm »

onthepike.......can you talk by phone?
Logged

Phill Luckhurst

  • Administrator
  • Coppermine addict
  • *****
  • Country: gb
  • Offline Offline
  • Gender: Male
  • Posts: 4822
    • Windsurf.me
Re: version
« Reply #13 on: August 10, 2009, 08:59:58 pm »

onthepike,

I know you are trying to help but Nibbler's answer stands. The site has been hacked and needs to be sanitised as per the thread Nibbler mentioned. Until everthing in that thread is done there is no point discussing this further. Simply upgrading will not sanitize the affected site.
Logged
It is a mistake to think you can solve any major problems just with potatoes.

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Re: version
« Reply #14 on: August 11, 2009, 08:03:43 am »

It may or may not have been hacked. Multiple scanners don't prove any malicious code, but that's not definitive in any way. It could have been hacked nonetheless.
Don't trust scanners: we know the payload of the hacks that exist in the wild, and this is one of them. The site in question has been hacked for sure. Trust Nibbler's experience, he's been around for quite a while.
Logged
Pages: [1]   Go Up
 

Page created in 0.021 seconds with 20 queries.