Printable View
Thanks Clyde.. Those are my findings as well.. Like I said this "security issue" comes down to some ambiguous and erroneous text we failed to scrub out of Tim's original readme file.. It will be addressed when we examine and correct the watermarking on large images issue.. (which I still maintain is a MINOR) issue at best since all the other major features of Image Handler do in fact work correctly..Posted via Mobile DeviceQuote:
Originally Posted by clydejones
I am so scared of aliens.
I have never seen one, so they never did anything to me either.
But I have heard stories of alien abductions, mostly in the X files.
Since I don't know about aliens, and just to be in the safe side, I am scared, and recommend to other people to stay away from them.
Sounds pretty much like these new security concerns:
images in the bmz-cache are encrypted, so it does not matter to what security level they are set.
If you use some free security tools like the Hacker toolbar, a free add-on for Firefox, or even the Linux CD from backtrack-linux.org, you will see what I mean.
Try to find an entry point there.
755 works for most Linux servers, I don't know if for all.
Just to feed the paranoia you can set to 755 recursively your bmz_cache, IH2 does NOT set permissions for folders.
Regarding the coders, yes they are dead people, and bad too, addicted to forks.
However, the last incarnation for IH2 has been written and tested for Zen Cart simply because...there is no IH2 plugin yet for that other bad thing they indulge in.
But stay tuned and you might soon find one.
I'm not sure what the watermark "issue" is, but I have images on my site watermarked for ALL image sizes and things seem to be working just fine.Quote:
Originally Posted by DivaVocals
After reading DrByte: "So, yes, in the case of IH2 the specified folders need to be writable ... whatever that means for YOUR unique hosting configuration. Whether 777 or 755 or whatever."
No problem to modify the readme to make folders recursively 755, again this might not work on older servers, but it does work fine for mine, and it is what files are automatically set for.
Same hereQuote:
Originally Posted by clydejones
thanks to clyde, ckosloff and Drbyte for clarifying and (more importantly) debunking this so-called issue.. the readme will be updated to include DrByte's explanation..
Posted via Mobile Device
and let me add one more thing to this..
IF you originally installed IH2 and set the permissions of your bmz_cache folder to 777, then began using IH2, and AFTER IH2 has begun creating sub-folders inside the bmz_cache folder you then change your bmz_cache folder permissions to 755 you will end up with folders inside your bmz_cache folders set to 777. So what's the Right Way to correct this?
You could simply reset the permission for each of the bmz_cache folders to 755.. or follow these steps..
1. Uninstall IH2 from the admin.
2. delete all of the sub folders within your bmz_cache folder (do not delete the .keep file)
or
delete your bmz_cache folder and re-upload the one from the IH2 module files
3. Re-install IH2
Going forward the permissions of the sub-folders IH2 creates within the bmz_cache folder will inheirit it's permissions from the parent folder. (755)
Now with that I'm off to enjoy the rest of my day at the track..Posted via Mobile DeviceQuote:
Originally Posted by ckosloff
Now i am confused! I have installed IH2 three times now to get this watermark problem resolved. Having followed this thread and the recent security argument, I looked at my directories to see what my chmod setting are. My bzm_cache directory is chmod 755 but all the directories within are chmod 777. Consequently all images created by IH2 are chmod 666. If this is not supposed to happen, why is this happening? I have not done anything to set these chmod permissions. :huh:
Quote:
Originally Posted by DivaVocals
.
SERIOUS ISSUE ON LIVE STORE - HELP NEEDED, PLEASE -
WILLING TO DONATE FOR SOME EDUCATED ADVICE:
Hi guys, I recently changed the category names on my store...
it seems IH2 doesn't like that... it's forgotten my product paths (in the admin).
When I try to change the image on ANY of my products in IH2...
it bounces me to the "admin" tab (within IH2)... "No Image Handler information found"
The IH2 dropdown menu shows my current category list...
but the 'base category' is showing the old category name.
I'm sure this is the problem... IH2 didn't update the change!!
(which is very uncool, all I did was change a category name!)
Anyway, this is quite serious... my site is fairly old, I can't afford the downtime...
as a t-shirt store, I'm heavily reliant on the IH2 functionality... so I can't make a mistake here...
the work involved in setting it up from scratch will take weeks!
I need some help getting IH2 to recognize my updated categories!
I'm a web designer, but not a developer...
I can hack my way through most things, just need some help to do it right the first time...
I'm willing to donate for your time!
.
I just noticed that IH2 is saying "Install Image Handler" under the 'Admin' section...Quote:
Originally Posted by blackhalo
but under the 'Manager' section everything is still visible, as if it were still installed... there's a disconnect somewhere.
I have no idea how it decided to think it's uninstalled, it was working fine last week...
I'm afraid to re-install it though, as it will delete all the work I've put into setting up each product.
I really need help from someone that's familiar with how IH2 works...
I can't risk anything without knowing what it will do first... this is a live store (that recently got a mind of it's own)!!!
Developers, feel free to contact me privately...
any insight would be appreciated though, I'm walking on eggshells here.
.