Image Handler 4 (for v1.5.x) Support Thread

[gazag]

I am running v1.5.1
I have I installed and running fine except one small thing which isn't exactly a hugh problem just more of a annoyance.

When you click on the product image and it brings the item up in the lightbox (Zen light box also installed) there are 2 images in the slide show but both are identical

[DivaVocals]

I am running v1.5.1
I have I installed and running fine except one small thing which isn't exactly a hugh problem just more of a annoyance.

When you click on the product image and it brings the item up in the lightbox (Zen light box also installed) there are 2 images in the slide show but both are identical

a link to you site to SEE what you are referring to would help.. but this sounds like a LIGHTBOX issue and not an IH4 issue..

[gazag]

a link to you site to SEE what you are referring to would help.. but this sounds like a LIGHTBOX issue and not an IH4 issue..

Sorry www(dot)lime light store(dot)com remove spaces and (dot)s

[DivaVocals]

Sorry www(dot)lime light store(dot)com remove spaces and (dot)s

FYI, if you are worried about you site being indexed, the spaces aren't necessary.. Simply typing in www(dot)limelightstore(dot)com is plenty to prevent the site from being indexed.. (makes it easier for community members to copy your URL)

Anyway if you are referring to the main image being repeated, this is NOT an IH4 issue.. It's a lightbox issue, and you need to go to the Zen Lightbox thread where lucky for you I just posted the solution for the problem. You will need to wade through a BUNCH of other posts.. Ignore them.. just focus in on MY posts.. Go back about 3 or 4 pages and wade your way forward..

[gazag]

FYI, if you are worried about you site being indexed, the spaces aren't necessary.. Simply typing in www(dot)limelightstore(dot)com is plenty to prevent the site from being indexed.. (makes it easier for community members to copy your URL)

Anyway if you are referring to the main image being repeated, this is NOT an IH4 issue.. It's a lightbox issue, and you need to go to the Zen Lightbox thread where lucky for you I just posted the solution for the problem. You will need to wade through a BUNCH of other posts.. Ignore them.. just focus in on MY posts.. Go back about 3 or 4 pages and wade your way forward..

THANKS that was a quick and easy fix. One more quick question - i have v1.5.1 and version IH4.3.1 installed do the security fixes found in the following posts still apply? Because my files look a lot different to what is posted....
http://www.zen-cart.com/showthread.p...47#post1215847
http://www.zen-cart.com/showthread.p...89#post1215889

[DivaVocals]

THANKS that was a quick and easy fix. One more quick question - i have v1.5.1 and version IH4.3.1 installed do the security fixes found in the following posts still apply? Because my files look a lot different to what is posted....
http://www.zen-cart.com/showthread.p...47#post1215847
http://www.zen-cart.com/showthread.p...89#post1215889

Don't thank me.. Thank Daniel (neistudio) it was his fix that solves the issue..

Re: the IH4 fixes posted here.. Yes.. and I will be submitting an update with those changes included..

[mc12345678]

Don't thank me.. Thank Daniel (neistudio) it was his fix that solves the issue..

Re: the IH4 fixes posted here.. Yes.. and I will be submitting an update with those changes included..

Diva, unless you get this message removed by the admins, forgive me for cross posting on this one issue.

Recognizing that there was an update needed for IH (I'm guessing all active versions are impacted) and for at least Zen Lightbox as an image handler referenced by IH4 an update to Zen Lightbox has been submitted to the plug-in review process. The update addresses only the co-existence of IH and Zen Lightbox. So other issues described in either of these forums were not incorporated into that update. Some are specific to alternate plugins and other unique situations.

Anyways, wanted to to put it out there because IH4 instructions do refer to ZLB and in this case/situation they are tied at the hip.

[mc12345678]

Applied all the suggested fixes to the code and all seems to work fine. What's next? Can somebody confirm that this does plug the outlined security holes?

For those just tuning in: the security hole being discussed related to a template file that was used in some versions of IH4 to display the additional images. The specific security issue was known as XSS (Cross Site Scripting) which is, in my summary, a situation where the code of one site can be or does use or access the code of another site via a function call from outside the code. In this case, a verification of existence of a local version (file) of the file/pathname combination sent to the template file shows a specific default image if the file/pathname doesn't equal a local item. If it is local, then the file/pathname is sent to be processed as an image.

So that is why it can be said that the correction addresses the XSS concern. Now IH provides a local filename when handling an image and before displaying the image, there is a verification that the image path is local.

[DivaVocals]

Diva, unless you get this message removed by the admins, forgive me for cross posting on this one issue.

Recognizing that there was an update needed for IH (I'm guessing all active versions are impacted) and for at least Zen Lightbox as an image handler referenced by IH4 an update to Zen Lightbox has been submitted to the plug-in review process. The update addresses only the co-existence of IH and Zen Lightbox. So other issues described in either of these forums were not incorporated into that update. Some are specific to alternate plugins and other unique situations.

Anyways, wanted to to put it out there because IH4 instructions do refer to ZLB and in this case/situation they are tied at the hip.

Right, and in answering gazag's last question I was only referring to the IH4 corrections posted in THIS support thread, not the separate (unrelated) ZLB fixes I posted in the ZLB thread as they have NOTHING to do with the IH4 fixes (and their purpose -- address a security vulnerability)

[jeffiec]

Hey there,
having some issues in the admin being able to enable/disable products from category page, I have read throuhg all of the posts i can find, ensured that the code in category_product_listing.php were correct:

if ($products->fields['products_status'] == '1') {
        echo zen_draw_form('setflag_products', FILENAME_CATEGORIES, 'action=setflag&pID=' . $products->fields['products_id'] . '&cPath=' . $cPath . (isset($_GET['page']) ? '&page=' . $_GET['page'] : '') . ((isset($_GET['search']) && !empty($_GET['search'])) ? '&search=' . $_GET['search'] : ''));?>
        <input type="image" src="<?php echo DIR_WS_IMAGES ?>icon_green_on.gif" title="<?php echo IMAGE_ICON_STATUS_ON; ?>" />
        <input type="hidden" name="flag" value="0" />
        </form>
<?php
      } else {
        echo zen_draw_form('setflag_products', FILENAME_CATEGORIES, 'action=setflag&pID=' . $products->fields['products_id'] . '&cPath=' . $cPath . (isset($_GET['page']) ? '&page=' . $_GET['page'] : '') . ((isset($_GET['search']) && !empty($_GET['search'])) ? '&search=' . $_GET['search'] : ''));?>
        <input type="image" src="<?php echo DIR_WS_IMAGES ?>icon_red_on.gif" title="<?php echo IMAGE_ICON_STATUS_OFF; ?>"/>
        <input type="hidden" name="flag" value="1" />
        </form>

and categories.php:

if ( isset($_GET['flag']) && ($_GET['flag'] == '0') || ($_GET['flag'] == '1') ) {
        if (isset($_GET['pID'])) {
          zen_set_product_status($_GET['pID'], $_GET['flag']);
        }
      }

and still cant turn them on or off, checked for error logs, none, check for console errors, none.

Anything im missing here?
ZC 1.51
IMH 4