Print

[corykantar]

Hello all,

I appologize for my lack of knowledge on this subject.. But here is my scenario.

My webhost changed servers, and migrated all my websites and databases to a new server.  Upon restoration, i am seeing several problems in the coppermine gallery i setup for my future father-in-law.  His gallery is at www.corgiatphotos.com/gallery. 

I am not certain how to ascertain the exact version of coppermine but i installed it only a few months ago, so it should be 1.4.x (maybe someone can give me a guidance on how to determine the version number).

At the top of the index page i see this error:

Notice: Undefined offset: 8192 in /home/dennis/public_html/corgiatphotos.com/gallery/include/debugger.inc.php on line 112

Also, i am unable to login to the admin with the credentials that worked before.

When i try to login with the correct credentials the error message is:
*** Couldn't log in. Try again *** 
Warning your browser does not accept script's cookies 


It may also be pertinent to note that the hosting server went from mysql 4 to mysql 5, and all the pictures and comments, etc appear to still work on the site, but i cannot administer it.

Any help is much appreciated!

[corykantar]

I located in the README the version is:


  ********************************************
  Coppermine version: 1.4.21
  $HeadURL: https://coppermine.svn.sourceforge.net/svnroot/coppermine/trunk/cpg1.4.x/README.txt $
  $Revision: 5728 $
  $Author: gaugau $
  $Date: 2009-03-02 09:25:17 +0100 (Mo, 02 Mär 2009) $
**********************************************/

[Joe Carver]

Also, i am unable to login to the admin with the credentials that worked before.

You could very well have been hacked. Yes, you need to upgrade to cpg1.4.25.

And you also need to read this thread - Yikes, I've been hacked Follow all steps.

Upgrading alone probably will not solve your problem.

Turn off Debug (in the Admin/Config menu) for the message that you see. However, if as you imply, things like the login have changed, but you haven't changed them then someone might have hacked into your site.

[corykantar]

hmmm... Okay, i can upgrade, however i think the fact that i was hacked is very very unlikely!

[corykantar]

actually can i even upgrade without login credentials to the admin section of my gallery?  I can ftp to my webhost... but wont i need to put the site into maintenance mode?

[Joe Carver]

...... however i think the fact that i was hacked is very very unlikely!

cpg1.4.23         * Fixed serious vulnerability (milw0rm exploits 8713)

[corykantar]

the reason i say it is unlikely is because the site wasnt even on google..  It was a really new site maybe up for 2 months, and unless coppermine reports itself to some directory, i dont see how a hacker would have known to hack the site, or with the two users that visit, what motivation they would have to do so!

[corykantar]

alright, i updated to the latest version, one error message is gone:

Notice: Undefined offset: 8192 in /home/dennis/public_html/corgiatphotos.com/gallery/include/debugger.inc.php on line 112


but i still cant login to the gallery as my admin account. 

[phill104]

Use phpmyadmin to check if there are any other users with admin rights.

[corykantar]

pardon my ignorance, but assuming i have phpmyadmin, what do i look for?

[phill104]

In the database (accessable via phpmyadmin) you will have a table marked CPGxxx_Users (where xxx will be numbers but is not important here). When you browse that table you will see a list of usernames. Associated with each username there will be a number of details, one of these will be marked user_group. If a user has a 1 in that user group he will be classed as an admin. So if any users are in that group that should not be then you need to do something about it.

If you do not have phpmyadmin the Nibbler has written just the plugin you need, a basic phpmyadmin install as a plugin for coppermine.

http://forum.coppermine-gallery.net/index.php/topic,58906.0.html

Please make a backup of your database efore doing any work on it. Also, if you are not familiar with phpmyadmin and databases google phpmyadmin basics where you will find loads of tutorials

[corykantar]

My original problem is solved i recovered the password through email and after upgrading everything seems to work fine.

new question:

I want to move my coppermine gallery from www.domain.com/gallery   to www.domain.com/

Can i simply move the files?  Is there a config in the admin section i need to change first and then move the files?

[phill104]

That question has been asked many times before. Please use the search facility where you will find some very detailed answers.

Additionally, we have a strict one question per thread rule. This is to aid users when using the aformentioned search facility.

Locking.