Problem with a newly installed gallery

PaoloIV · User Joined: Oct 07, 2004 Posts: 36

Ok here's what happened, I had allready a gallery installed on my oild phpnuke site, I deleted the old version 7.2 and installed the new 7.5 version, I installed the gallery too on this version but I left the old Albums directory, I configured the whole gallery and everything worked fine, now I can see perfectly the thumb images but if I click on an image of the gallery to enlarge it I get this error

Error: Requested index [0] out of bounds [374]
Fatal error: Call to a member function on a non-object in /web/htdocs/www.dwarf.it/home/modules/gallery/classes/Album.php on line 1258

----
Give us your Gallery/webserver information to get a faster answer.
Get this information from the PHP diagnostic (in the configuration wizard).
Gallery URL (optional but very useful): www.dwarf.it
Gallery version: 1.4.4 pl4
Graphics Toolkit:GD
Operating system: Linux
Web browser/version (if applicable): Explorer latest

thank you for your help

AdBot

dari

try running the gallery setup again and double checking all your paths.
_________________

PaoloIV · User Joined: Oct 07, 2004 Posts: 36

wait I have an idea....where are the config settings stored? in the database or in a file? because I've a backup of both so I can simply replace the new one with the old one and if it's a config problem it shoiuld work fine..

dari

the configuration itself is in the config.php file in your gallery directory. data files pertaining to users and albums are in the album.dat and user.dat files.
_________________

PaoloIV · User Joined: Oct 07, 2004 Posts: 36

config doesn't change anything Sad

where's that album.dat file? I couldn't find it in the gallery main directory...

maybe this is the problem : for almost everypicture I added the author and a little description, if that's not stored in the albums folder maybe that lost it?

thanks for the help as always

dari

The album data files are in the album directory (and in each specific album's directory).

I would also recommend upgrading to 1.4.4-pl6 as well. This might solve your problem.
_________________

PaoloIV · User Joined: Oct 07, 2004 Posts: 36

I only need to download the pl6 gallery or the pl5 too? ^^
sorry to bother but now that I have your attention on me I'm all warm Mr. Green

PaoloIV · User Joined: Oct 07, 2004 Posts: 36

nutting nutting nutting, I upgraded it, but yet nothing happened... the weird thing is that it adds new pictures, it links them you can even see the thumbnails but you can't see the picture.... I tryed to upload a new picture it uploaded it perfectly I can see it trough ftp, I can link it but if I click on it that error comes out....

some other clue?

DanB

It's a problem with Nuke Sentinel and Gallery (specifically the Santy worm code).

I had the exact same problem on line 1258. There's a description and fix at http://ravenphpscripts.com/postt4165.html

Although - I fixed the error somewhat differently.

Based on what I could see, the variable $id is being used by two different process. So I changed the Santy worm fix with the following code (I'd like feedback if someone has a better idea):

Open includes/sentinel.php and find:

// Stop Santy Worm
$bad_uri_content="rush,highlight,perl,chr(,pillar,visualcoder,sess_";
global $REQUEST_URI;
$tmp=explode(",",$bad_uri_content);
while(list($id,$uri_content)=each($tmp)) {
if (strpos($REQUEST_URI,$uri_content)) {
die("Illegal Content");
}
}

I added two lines - one before and one after to save and then restore the variable $id

// Stop Santy Worm
$saveid = $id;
$bad_uri_content="rush,highlight,perl,chr(,pillar,visualcoder,sess_";
global $REQUEST_URI;
$tmp=explode(",",$bad_uri_content);
while(list($id,$uri_content)=each($tmp)) {
if (strpos($REQUEST_URI,$uri_content)) {
die("Illegal Content");
}
}
$id = $saveid;

Now both are working and I didn't have to disable the Nuke Sentinel Santy worm code Smile

PaoloIV · User Joined: Oct 07, 2004 Posts: 36

IT WORKS!
thanks a lot, will it give me some problem on security?
Dari put it in the faq! ^^ it's too usefull if you have both sentinel and gallery installed

dari

Done. Added as FAQ C-4.
_________________

PaoloIV · User Joined: Oct 07, 2004 Posts: 36

as always you'r able to solve my problems thanks to you and to nukedgallery.net

dari

hehe...thanks for the compliments. but it isn't just me....the success of NukedGallery is due in large part to all the great users out there who help out the others who have questions.
_________________

DanB

Another update...

The code above restricts words like rush, highlight, perl, chr, etc... from the input string.

But, Gallery uses the word "highlight" when you try to "highlight a picture or album".

There are probably several work arounds. I simply took out the highlight as a restriction.

Here's my code now (below).

If someone wants to take the time to code a more elaborate solution, then please post it.

Cheers - Dan

// Stop Santy Worm
$saveid = $id;
$bad_uri_content="rush,perl,chr(,pillar,visualcoder,sess_";
global $REQUEST_URI;
$tmp=explode(",",$bad_uri_content);
while(list($id,$uri_content)=each($tmp)) {
if (strpos($REQUEST_URI,$uri_content)) {
die("Illegal Content");
}
}
$id = $saveid;

dari

one of the reasons that "highlight" was included was because of a phpBB exploit involving the highlight code. if your version of phpBB is up to date, you can (i think) safely remove highlight from the list.
_________________