After 1.3.9 Upgrade, graphics disappear

[mshultise]

I just upgraded to 1.3.9 from 1.3.8a. I am using gloss_black template by the way. I am on PHP 4.4.8 but can upgrade to 5 if desired.

After the update, all graphics and the template graphics are missing. renaming the .htaccess file in the stores include directory brings the template graphics back, and renaming the .htaccess in the store's image directory brings the some of my other graphics back.

I assume this is related to the "Limit Options Indexes" option suggested for the webserver.

I'll contact them to see what my settings are and report back, but wanted to give people a heads up as I have not seen this issue reported yet.

[jynxy]

what format is the images in ? .gif .jpg .png etc ??

[mshultise]

jpg and gif

BTW, I sent you a private message too.

[mshultise]

The hosting company replied:

---

Hello,

Thank you for contacting our Technical Support Department.
Please note that the usage of AllowOverride All is not necessary and from the htaccess code you will only have to remove the last line: OPTIONS -Indexes -ExecCGI

This is in fact replaced by the line above: IndexIgnore *

and it prevents directory listings.

If we can help you with any other problem, do not hesitate to contact us again. You are always welcome.

--

I removed the last line and the graphics came back, but I believe we still need the -ExecCGI though.

[Qdixon]

What you removed is .htaccess security.

Removing OPTIONS -Indexes -ExecCGI will allow execution of cgi scripts in that directory and the indexing. For redundancy the indexignore is a backup for directory listing.

I did notice that your host really needs to upgrade and upon doing so, these features will work.

Just to be blunt, your store is not safe using php 4.4.8

[mshultise]

What was removed is .htaccess security.

Removing OPTIONS -Indexes -ExecCGI will allow execution of cgi scripts in that directory and the indexing. For redundancy the indexignore is a backup for directory listing.

I did notice that your host really needs to upgrade and upon doing so, these features will work.

Just to be blunt, your store is not safe using php 4.4.8

I have control over the PHP version via the control panel and changed PHP to version 5.2.1.

However, based upon my initial contact with the hosting compny, it does not sound as though they have or will update the httpd files. Is this change to httpd a normally requested option?

[Qdixon]

Actually you should upgrade to the current version 5.2.13 or the 5.3 series as they are most secure as of the date of this post.

Httpd refers to Apache...What version is that?

[mshultise]

Actually you should upgrade to the current version 5.2.13 or the 5.3 series as they are most secure as of the date of this post.

Httpd refers to Apache...What version is that?

My Option for PHP is 4, 5 or 6 (and they suggest 6 is not ready for prime time :-). I chose 5 and got 5.2.1. I assume they will roll out an update soon.

As for Apache, I don't see the version in the control panel, but a 500 error page shows:
Apache/2.2.11 (Unix) mod_ssl/2.2.11 OpenSSL/0.9.7e mod_auth_pgsql/2.0.3

[Qdixon]

You apache version is fine. I would just work to get PHP 5.2.13 from them.

[BlessIsaacola]

Odixon, I'd like your take on this post: http://www.zen-cart.com/forum/showthread.php?t=153211 I definitely think there are issues with the newly introduct .htaccess files introduced in different folders.

Thanks!