Image Handler 4 (for v1.5.x) Support Thread

[DivaVocals]

there is already an htaccess file in the bmz_cache folder

I am using zen cart 1.5.1 and have become concerned about the number of hacking attempts that I see in the server error logs.I am making an effort to beef up site security and believe the images folders are vulnerable.
Image Handler4 seems to need permissions of 755 on folders in the bmz_cache and 666 on image files within the cache in order to work properly.If I protect the bmz_cache folder with htaccess is that going to be hack resistant ?

[cefyn]

there is already an htaccess file in the bmz_cache folder

Ha,yes,well,you were a bit ahead of me there then,ahem,obviously.What I am finding hard to believe is that .htaccess can protect a folder from unauthorised users even if the permissions on it and the files and folders in it are 777.I'm testing this,and it seems to be the case.Or am I missing something? And if I am, please tell me what it is.

[cefyn]

Sorry,it's an impossible question to answer.Too many ifs and buts .It will prevent browser access by anyone,but is only safe if you're on a dedicated server secured against unauthorised sshd and sftp access.

[DivaVocals]

Ha,yes,well,you were a bit ahead of me there then,ahem,obviously.What I am finding hard to believe is that .htaccess can protect a folder from unauthorised users even if the permissions on it and the files and folders in it are 777.I'm testing this,and it seems to be the case.Or am I missing something? And if I am, please tell me what it is.

Sorry,it's an impossible question to answer.Too many ifs and buts .It will prevent browser access by anyone,but is only safe if you're on a dedicated server secured against unauthorised sshd and sftp access.

You REALLY should start a new thread to discuss this.. Your general question is only moderately related to IH4.. You could apply the same question to the default images folder as well.. If you REALLY are concerned about security and .htaccess, start a new thread..

[cefyn]

Sorry ,I was a bit freaked by a couple of bruteforce password attacks and didn't ask a coherent question.The main images folder is ok with normal permissions.If I have 644 on files in the bmz_cache I keep getting errors - failed to open bmz cache for writing,permission denied in lines 645 and 655 in bmz_image_handler.class.php.It runs without errors with world write permissions.Is there something I should correct,or is that as it should be?

[lhungil]

Sorry ,I was a bit freaked by a couple of bruteforce password attacks and didn't ask a coherent question.The main images folder is ok with normal permissions.If I have 644 on files in the bmz_cache I keep getting errors - failed to open bmz cache for writing,permission denied in lines 645 and 655 in bmz_image_handler.class.php.It runs without errors with world write permissions.Is there something I should correct,or is that as it should be?

Sounds like your hosting provider may be running PHP using the web server's account (instead of an account created specifically for your website). In this case the web server's account must have write permission to the bmz_cache folder (as well as the Zen Cart image, cache, log, and other folders).

You can contact your hosting provider for more details on what permissions will be necessary (as they depend upon the server configuration). No further response to your questions about "security" and changing "permissions" will be answered by me in this thread. If your hosting provider is unable to assist you, you can start a new thread... But your hosting provider is the only one with all the relevant information on how their servers are configured.

To start a new thread click the large "Post New Thread" button (probably in the General Forum or the Installing on Linux Forum).

[cefyn]

Thank you for your patience,and your kindness in providing such a comprehensive answer.

Solved.

[aquaessential]

I've got a large database of images, and save all images in the appropriate name for SEO purposes. Only snag is that image handler removes the name I save them as and changes it to something specific and non related. This is of course useless to google (but convenient to me as it converts 1 image to 3 different sized images).

I would dearly love google to use all 1700 of my images and increase traffic to my site.

Does anyone know of a way around this so that the names are saved as the proper name as opposed to what image handler does to them?

DivaVocals recommended to re-write the part of the IH4 code that manages the image cache file naming. My coder can't seem to find the function responsible for renaming thumbs.

Can DivaVocals advise?

Thanks!

[DivaVocals]

I've got a large database of images, and save all images in the appropriate name for SEO purposes. Only snag is that image handler removes the name I save them as and changes it to something specific and non related. This is of course useless to google (but convenient to me as it converts 1 image to 3 different sized images).

I would dearly love google to use all 1700 of my images and increase traffic to my site.

Does anyone know of a way around this so that the names are saved as the proper name as opposed to what image handler does to them?

DivaVocals recommended to re-write the part of the IH4 code that manages the image cache file naming. My coder can't seem to find the function responsible for renaming thumbs.

Can DivaVocals advise?

Thanks!

Nope.. It IS a re-write of a core part of IH's core code.. But off the top of my head, I don't know which files are impacted.. I've never looked into this deep enough because this part of the code really isn't "broken"..

BTW.. Google could CARE LESS what your images are named.. Google will still find and index your site's images regardless of what they are named..

[joepixel]

Hi,

Has anyone had an issue where the last product image is duplicated when adding additional product images. I have a client that has this issue fairly consistently. The image size is not large (which I see can be an issue). I can't find any errors associated with this. And, I've not been able to duplicate this myself. But, it does happen to my client and I can't figure out why. And, I don't see anyone else here having the same issue. Any ideas?

Zen Cart version 1.5.1
Image Handler 4

Thanks!