Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: xp_publish broken in devel  (Read 6174 times)

0 Members and 1 Guest are viewing this topic.

Casper

  • VIP
  • Coppermine addict
  • ***
  • Country: 00
  • Offline Offline
  • Gender: Male
  • Posts: 5231
xp_publish broken in devel
« on: September 14, 2004, 03:25:00 pm »

Copy of report by cryogenic, here.  I have tested and can confirm.  Sugest rollback to previous version.

OK, so just for fun I decided to try the xp_publish method of posting pics to my gallery. I'd just updated to the latest CVS version 1.15 posted about 24 hrs ago. However it did not work as expected.    I did as instructed on the xp_publish.php page, merged the registry entry, selected the pics I wanted to upload, entered my username/pass, picked the gallery I wished for the pics to be placed in... pressed finish, pics are nowhere to be found. So I check other galleries, still no luck. I checked the log files... again no sign. I even FTP'd into my host to find the pics, nowhere to be found. At this point, I deleted the registry entries, re-downloaded the .reg file, re-merged, tried again. Same result. I downgraded to the previous CVS version of xp_publish.php, 1.13, and it worked perfectly. It appears that the substitution of the superglobals broke something somewhere. Everything else on my gallery has been upgraded to the versions with the superglobal variables, so I don't think file version mismatches would be the problem. Everything else appears to function as expected (including uploading directly from CPG and also using the batch upload feature). I also found it odd that downgrading to 1.13 fixed the problem immediately without even re-merging the registry entries.
« Last Edit: September 23, 2004, 04:12:22 pm by TranzNDance »
Logged
It has been a long time now since I did my little bit here, and have done no coding or any other such stuff since. I'm back to being a noob here

Nibbler

  • Guest
Re: xp_publish broken in devel
« Reply #1 on: September 14, 2004, 04:32:11 pm »

I'd guess this is caused by $HTTP_POST_FILES being changed to $_POST instead of $_FILES
Logged

Tranz

  • Dev Team member
  • Coppermine addict
  • ****
  • Country: 00
  • Offline Offline
  • Gender: Female
  • Posts: 6149
Re: xp_publish broken in devel
« Reply #2 on: September 23, 2004, 04:45:50 am »

Nibbler,

You were correct. :) I replaced $_POST['userpicture'] with $_FILES['userpicture'] and the upload worked.
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Re: xp_publish broken in devel
« Reply #3 on: September 23, 2004, 08:04:32 am »

did you commit your fix?

Joachim
Logged

Tranz

  • Dev Team member
  • Coppermine addict
  • ****
  • Country: 00
  • Offline Offline
  • Gender: Female
  • Posts: 6149
Re: xp_publish broken in devel
« Reply #4 on: September 23, 2004, 04:10:46 pm »

Changes have been committed, and the new bug report has been split into a new topic.
Logged
Pages: [1]   Go Up
 

Page created in 0.025 seconds with 19 queries.