Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

[Resolved] Album Delete Errors

Tagged: 

  • Participant
    Level: Initiated
    Posts: 5
    lovemonk on November 25, 2015 at 6:45 pm #1773

    Hi Brajesh,

    Have been testing Mediapress out. Thanks very much for it, it’s doing pretty good on my test site. Have tried to delete albums today and have run into a problem. If an album for deletion has any pictures in it it throws an error. (Copy pasted below.) If album has no pictures in it, it deletes fine with no errors.

    Warning: scandir(/var/sites/g/gcshed.co.uk/public_html/wp-content/uploads/mediapress/members/1/29220/../../../../../../../..) [function.scandir]: failed to open dir: Permission denied in /var/sites/g/gcshed.co.uk/public_html/wp-content/plugins/mediapress-master/core/common/mpp-common-functions.php on line 1130

    Warning: scandir() [function.scandir]: (errno 2): No such file or directory in /var/sites/g/gcshed.co.uk/public_html/wp-content/plugins/mediapress-master/core/common/mpp-common-functions.php on line 1130

    Warning: Invalid argument supplied for foreach() in /var/sites/g/gcshed.co.uk/public_html/wp-content/plugins/mediapress-master/core/common/mpp-common-functions.php on line 1132

    Warning: Cannot modify header information – headers already sent by (output started at /var/sites/g/gcshed.co.uk/public_html/wp-content/plugins/mediapress-master/core/common/mpp-common-functions.php:1130) in /var/sites/g/gcshed.co.uk/public_html/wp-includes/pluggable.php on line 1207

  • Participant
    Level: Initiated
    Posts: 5
    lovemonk on November 25, 2015 at 6:45 pm #1774

    SHould have mentioned. WordPress/Buddypress fully up to date.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on November 25, 2015 at 6:52 pm #1775

    Hi Duncan,
    Thank you for asking.

    Is the file deleting showing this

    
/wp-content/uploads/mediapress/members/1/29220/../somepath/somepath/../../../../..

    If yes, then It is related to the way the absolute path is being calculated. There is something wrong with it.
    Is there anything specific about your web server configuration?( Are you using nginx or apache ?)

  • Participant
    Level: Initiated
    Posts: 5
    lovemonk on November 25, 2015 at 7:33 pm #1776

    The album deleting is showing that. The album does actually delete but throws those errors. Individual pictures and empty albums delete with no errors. Just albums with pictures in.

    Apache. Hosting is just standard cloud hosting with a very reputable and respected UK host, Vidahost.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on November 25, 2015 at 10:08 pm #1777

    Hi Duncan,
    I have made a small change here

    https://github.com/buddydev/mediapress/commit/5bc6a359e01221df67e149a5d09b72d15be30c2e

    and have pushed it. Can you please give it a try and see if it works or not?

    Thank you
    Brajesh

  • Participant
    Level: Initiated
    Posts: 5
    lovemonk on November 25, 2015 at 11:50 pm #1780

    Brajesh. Worked perfectly. Thank you for the quick fix.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on November 26, 2015 at 12:31 am #1781

    Hi Duncan,
    Thank you for the report and help is fixing the bug.
    Closing this topic as resolved. Please do open new topic if you find any issue with MediaPress.

    Thank you
    Brajesh

The topic ‘ [Resolved] Album Delete Errors’ is closed to new replies.

This topic is: resolved