Image Handler 4 (for v1.5.x) Support Thread

**mydanilo** · 22 Aug 2013, 02:05 PM

mc12345678, your are correct. It shows the error image instead of my additional image. I shall check if the new IH handles my file names differently. I don't think I have screwed up picture file names but I will double check later and post result.

**mydanilo** · 22 Aug 2013, 02:19 PM

I've uploaded now the IH4 version of the tpl_main_page.php again so you can see the behavior. Take spaces out of this link.
http://www. mydanilo.com /zen15/index.php?main_page=product_info&cPath=53&products_id=741

**DivaVocals** · 22 Aug 2013, 03:29 PM

Dunno if this is CORRECT or resolves the XSS issues that was the inciting reason why IH4 was updated to begin with.. This code works, but I need someone to validate if it resolves the XSS issue that was identified in IH4 v4.1.

Code:

<?php
/**mod Image Handler 4.3.2
 * Override Template for common/tpl_main_page.php
 *
 * @package templateSystem
 * @copyright Copyright 2005-2006 Tim Kroeger
 * @copyright Copyright 2003-2005 Zen Cart Development Team
 * @copyright Portions Copyright 2003 osCommerce
 * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
 * @version $Id: tpl_main_page.php,v 2.0 Rev 8 2010-05-31 23:46:5 DerManoMann Exp $
 */
?>
<body id="popupAdditionalImage" class="centeredContent" onload="resize();">
<div>
<?php
    echo '<a href="javascript:window.close()">' . zen_image(strip_tags($_GET['products_image_large_additional']), $products_values->fields['products_name'] . ' ' . TEXT_CLOSE_WINDOW) . '</a>';
?>
</div>
</body>

**mydanilo** · 22 Aug 2013, 03:46 PM

Originally Posted by DivaVocals

Dunno if this is CORRECT or resolves the XSS issues that was the inciting reason why IH4 was updated to begin with.. This code works, but I need someone to validate if it resolves the XSS issue that was identified in IH4 v4.1.

Code:

<?php
/**mod Image Handler 4.3.2
 * Override Template for common/tpl_main_page.php
 *
 * @package templateSystem
 * @copyright Copyright 2005-2006 Tim Kroeger
 * @copyright Copyright 2003-2005 Zen Cart Development Team
 * @copyright Portions Copyright 2003 osCommerce
 * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
 * @version $Id: tpl_main_page.php,v 2.0 Rev 8 2010-05-31 23:46:5 DerManoMann Exp $
 */
?>
<body id="popupAdditionalImage" class="centeredContent" onload="resize();">
<div>
<?php
    echo '<a href="javascript:window.close()">' . zen_image(strip_tags($_GET['products_image_large_additional']), $products_values->fields['products_name'] . ' ' . TEXT_CLOSE_WINDOW) . '</a>';
?>
</div>
</body>

This code works. My additional images popup now show up. Don't know about XSS issue tho.

**DivaVocals** · 22 Aug 2013, 03:54 PM

Originally Posted by DivaVocals

Dunno if this is CORRECT or resolves the XSS issues that was the inciting reason why IH4 was updated to begin with.. This code works, but I need someone to validate if it resolves the XSS issue that was identified in IH4 v4.1.

Code:

<?php
/**mod Image Handler 4.3.2
 * Override Template for common/tpl_main_page.php
 *
 * @package templateSystem
 * @copyright Copyright 2005-2006 Tim Kroeger
 * @copyright Copyright 2003-2005 Zen Cart Development Team
 * @copyright Portions Copyright 2003 osCommerce
 * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
 * @version $Id: tpl_main_page.php,v 2.0 Rev 8 2010-05-31 23:46:5 DerManoMann Exp $
 */
?>
<body id="popupAdditionalImage" class="centeredContent" onload="resize();">
<div>
<?php
    echo '<a href="javascript:window.close()">' . zen_image(strip_tags($_GET['products_image_large_additional']), $products_values->fields['products_name'] . ' ' . TEXT_CLOSE_WINDOW) . '</a>';
?>
</div>
</body>

DO NOT USE THIS CODE UNTIL IT IS VERIFIED AS SAFE!!!

That said here's an alternate..

Code:

<?php
/**mod Image Handler 4.1
 * Override Template for common/tpl_main_page.php
 *
 * @package templateSystem
 * @copyright Copyright 2005-2006 Tim Kroeger
 * @copyright Copyright 2003-2005 Zen Cart Development Team
 * @copyright Portions Copyright 2003 osCommerce
 * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
 * @version $Id: tpl_main_page.php,v 2.0 Rev 8 2010-05-31 23:46:5 DerManoMann Exp $
 */
?>
<body id="popupAdditionalImage" class="centeredContent" onload="resize();">
<div>
<?php
  echo '<a href="javascript:window.close()">' . zen_image(htmlspecialchars($_GET['products_image_large_additional']), $products_values->fields['products_name'] . ' ' . TEXT_CLOSE_WINDOW) . '</a>'  
?>
</div>
</body>

**mc12345678** · 23 Aug 2013, 05:35 PM

Originally Posted by EHSI

Thank you for the reply.

OK, maybe I do not remember exactly how the first installation of the IH4 worked, but now it works properly now and it forces me to upload a default image first. My default image is the largest image and has size of 150K. Unfortunately, you did not answer my question which is:

Why all three sizes of images (small, medium, and large) have the same size of 150K. Why does not the IH4 re-size them appropriately?

I know that in my first installation of the IH4, it re-sized the small, medium, and large images accordingly now all three images have the same (large) size. Maybe I did not activate some function?

So, how did you discover that the three "created" files are all the same size? If you only uploaded the one file to the default image, then all other images are created in your bmz folder in the hashed directory/file that bmz creates. If you have uploaded the same file to all three positions, then there will be the three pictures in your images directory and you won't see any resizing. This application does not adjust the file sizes of the images directory but the pictures that are shown which comes from the applicable area of the bmz folder.

**DivaVocals** · 23 Aug 2013, 05:38 PM

Originally Posted by mc12345678

So, how did you discover that the three "created" files are all the same size? If you only uploaded the one file to the default image, then all other images are created in your bmz folder in the hashed directory/file that bmz creates. If you have uploaded the same file to all three positions, then there will be the three pictures in your images directory and you won't see any resizing. This application does not adjust the file sizes of the images directory but the pictures that are shown which comes from the applicable area of the bmz folder.

Not completely true.. the purpose of the other positions is if you want a different medium or large image than the default image you uploaded..

Click on the main image here to see this in action:
http://zentestcart(dot)overthehillwe...roducts_id=104

**EHSI** · 23 Aug 2013, 05:58 PM

Originally Posted by mc12345678

So, how did you discover that the three "created" files are all the same size? If you only uploaded the one file to the default image, then all other images are created in your bmz folder in the hashed directory/file that bmz creates. If you have uploaded the same file to all three positions, then there will be the three pictures in your images directory and you won't see any resizing. This application does not adjust the file sizes of the images directory but the pictures that are shown which comes from the applicable area of the bmz folder.

Thank you for the reply.

I know the size of the images because IH4 shows the size of each image below the image. I DO NOT insert three images, I only insert one image (default one) and it is my large image with the size of 150K. Again, in the first installation of the IH4, I saw that all three images had different sizes. Not in this installation. In this installation all three images have the size of 150K.

Posting a link to the product section will not help. First, there is only one product and one image. Second, you would not know that there is a problem by looking at the image at the front of the store. The problem is visible only at the control panel because IH4 shows that ALL three images (small, medium, and large) have the same size of 150K.

Here is the copy of the Image settings:

Title Value Action
Small Image Width 150
Small Image Height
Heading Image Width - Admin 57
Heading Image Height - Admin 40
Subcategory Image Width 150
Subcategory Image Height
Calculate Image Size true
Image Required true
Image - Shopping Cart Status 1
Image - Shopping Cart Width 150
Image - Shopping Cart Height
Category Icon Image Width - Product Info Pages 150
Category Icon Image Height - Product Info Pages
Top Subcategory Image Width 150
Top Subcategory Image Height
Product Info - Image Width 400
Product Info - Image Height
Product Info - Image Medium Suffix _MED
Product Info - Image Large Suffix _LRG
Product Info - Number of Additional Images per Row 3
Image - Product Listing Width 200
Image - Product Listing Height
Image - Product New Listing Width 200
Image - Product New Listing Height
Image - New Products Width 200
Image - New Products Height
Image - Featured Products Width 200
Image - Featured Products Height
Image - Product All Listing Width 200
Image - Product All Listing Height
Product Image - No Image Status 1
Product Image - No Image picture no_picture.gif
Image - Use Proportional Images on Products and Categories 1
IH resize images yes
IH small images filetype no_change
IH small images background 255:255:255
IH small images compression quality 85
IH small images watermark no
IH small images zoom on hover yes
IH small images zoom on hover size Medium
IH medium images filetype no_change
IH medium images background 255:255:255
IH medium images compression quality 85
IH medium images watermark no
IH large images filetype no_change
IH large images background 255:255:255
IH large images compression quality 85
IH large images watermark no
IH large images maximum width 1050
IH large images maximum height 770
IH watermark gravity Center

Thank you for your attention to this problem.

**DivaVocals** · 23 Aug 2013, 06:05 PM

Originally Posted by EHSI

I know the size of the images because IH4 shows the size of each image below the image. I DO NOT insert three images, I only insert one image (default one) and it is my large image with the size of 150K. Again, in the first installation of the IH4, I saw that all three images had different sizes. Not in this installation. In this installation all three images have the size of 150K.

And again.. this is not normal behavior.. So you either have something configured incorrectly or you have uploaded images incorrectly.. Please tell me.. Do you see a "Delete" button below the small, medium, or large images (it would be just below the image sizes you see) in the IH4 admin

Originally Posted by EHSI

Posting a link to the product section will not help. First, there is only one product and one image. Second, you would not know that there is a problem by looking at the image at the front of the store. The problem is visible only at the control panel because IH4 shows that ALL three images (small, medium, and large) have the same size of 150K.

Ummm yeah we would see it on the front end which is why we REPEATEDLY ask people to post links to their site.. One image or twelve, we can still see the behavior.. So help us help you by providing the information we ask for..

**EHSI** · 23 Aug 2013, 06:17 PM

Originally Posted by DivaVocals

And again.. this is not normal behavior.. So you either have something configured incorrectly or you have uploaded images incorrectly.. Please tell me.. Do you see a "Delete" button below the small, medium, or large images (it would be just below the image sizes you see) in the IH4 admin

Ummm yeah we would see it on the front end which is why we REPEATEDLY ask people to post links to their site.. One image or twelve, we can still see the behavior.. So help us help you by providing the information we ask for..

OK, the link to the store is http://www.augustica.com/Store/index.php

To answer your send question about the delete button, I am attaching a screenshot:

Thread: Image Handler 4 (for v1.5.x) Support Thread

Thread Tools

Search Thread

Display

Hybrid View

Re: Image Handler 4 (for v1.5.x) Support Thread

Re: Image Handler 4 (for v1.5.x) Support Thread

Re: Image Handler 4 (for v1.5.x) Support Thread

Re: Image Handler 4 (for v1.5.x) Support Thread

Re: Image Handler 4 (for v1.5.x) Support Thread

Re: Image Handler 4 (for v1.5.x) Support Thread

Re: Image Handler 4 (for v1.5.x) Support Thread

Re: Image Handler 4 (for v1.5.x) Support Thread

Re: Image Handler 4 (for v1.5.x) Support Thread

Re: Image Handler 4 (for v1.5.x) Support Thread

Similar Threads

v158 Image Handler 5 (for v1.5.5 - v1.5.8) Support Thread

Attribute image replaces main product image on select [Support Thread]

v139h Image Handler 3 Support Thread (for ZC v1.3.9)

v138a Image Handler 2 (for ZC v1.3.8 ONLY) Support

Image Handler Support Please

Posting Permissions