Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Lightbox not loading

Tagged: 

  • Participant
    Level: Enlightened
    Posts: 43
    Oscar on July 11, 2018 at 6:07 pm #16261

    Hello, I have a picture of 720 × 1280, and it is not showing on lightbox, Is it because of the size?

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on July 11, 2018 at 7:26 pm #16262

    Hi Oscar,
    Can you please share a screenshot and show me what is happening?

    Thank you

  • Participant
    Level: Enlightened
    Posts: 43
    Oscar on July 11, 2018 at 7:37 pm #16266

    https://drive.google.com/file/d/1wVpTfdjbNClGnSs_e6zy4OOuha-uv4Jj/view?usp=sharing

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on July 11, 2018 at 7:42 pm #16267

    Please check the console. It seems to me that the lightbox has some issue retrieving image from your server.
    I haven’t seen it but most probably some issue with mime type. Please check console and see if you can find some detail.

    Another possibility is something is causing the json reponse to be invalid. Some plugin or code can do it. You can check it from Chrome Console->Network tab when opening the lightbox.

  • Participant
    Level: Enlightened
    Posts: 43
    Oscar on July 11, 2018 at 7:55 pm #16274

    Yeah, for some reason, maybe the uploader, the file was named file043.jpg.jpg maybe is that?

    Another question, does mediapress support gif files? Is it a video or photo?

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on July 11, 2018 at 7:58 pm #16275

    Hi Oscar,
    Yes, the lightbox is getting confused due to that. It should have single extension.

    MediaPress uses default WordPress uploader, so it does support gif for original image size(animation works). The thumbnails(resized images won’t act like a animated gif though).

  • Participant
    Level: Enlightened
    Posts: 43
    Oscar on July 11, 2018 at 7:59 pm #16276

    Do I have to enable it on extensions?

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on July 11, 2018 at 8:01 pm #16277

    Is it about the double extension? MediaPress should have sanitized the file name out of the box.

    Are you using any customization or plugin that deals with file naming?

  • Participant
    Level: Enlightened
    Posts: 43
    Oscar on July 11, 2018 at 8:07 pm #16278

    Nope, I don’t think so, this is my configuration:

    // Generated by the MediaPress Debug tool //

    Multisite: No

    SITE_URL: https://www.viveswinger.com
    HOME_URL: https://www.viveswinger.com

    WordPress Version: 4.9.7
    Permalink Structure: /%category%/%postname%/

    Active Theme: Kleo Child
    Parent Theme: Kleo Child

    Registered Post Stati: publish, future, draft, pending, private, trash, auto-draft, inherit, request-pending, request-confirmed, request-failed, request-completed

    // Browser Details //
    Browser Name: Firefox
    Browser Version: 61.0
    Browser User Agent String: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0
    Platform: Windows
    // End Browser Section //

    PHP Version: 7.1.16
    PHP Extensions: Core,date,libxml,openssl,pcre,sqlite3,zlib,bz2,calendar,ctype,curl,hash,filter,ftp,gettext,gmp,SPL,iconv,pcntl,readline,Reflection,session,standard,shmop,SimpleXML,mbstring,tokenizer,xml,litespeed,bcmath,dom,fileinfo,gd,imagick,imap,inotify,intl,json,exif,mcrypt,mysqli,mysqlnd,PDO,pdo_mysql,pdo_sqlite,Phar,posix,soap,xmlreader,xmlrpc,xmlwriter
    GD enabled: Yes

    //GD Info
    GD Version: bundled (2.1.0 compatible)
    FreeType Support: 1
    FreeType Linkage: with freetype
    GIF Read Support: 1
    GIF Create Support: 1
    JPEG Support: 1
    PNG Support: 1
    WBMP Support: 1
    XPM Support: 1
    XBM Support: 1
    WebP Support: 1
    JIS-mapped Japanese Font Support:
    // End GD Info

    MySQL Version: 5.6.39-cll-lve
    Web Server Info: Apache

    WordPress Memory Limit: 40M
    PHP Safe Mode: No
    PHP Memory Limit: 256M
    PHP Upload Max Size: 4M
    PHP Post Max Size: 8M
    PHP Upload Max Filesize: 4M
    PHP Time Limit: 600
    PHP Max Input Vars: 1000
    PHP Arg Separator: &
    PHP Allow URL File Open: Yes
    WP_DEBUG: Disabled
    SCRIPT_DEBUG: Disabled

    // Table Prefix //
    Table Prefix: wp_

    Show On Front: page
    Page On Front: Comunidad Swinger en línea (#9850)
    Page For Posts: Comunidad (#8307)

    Session: Enabled
    Session Name: PHPSESSID
    Cookie Path: /
    Save Path: /opt/alt/php71/var/lib/php/session
    Use Cookies: On
    Use Only Cookies: On

    DISPLAY ERRORS: N/A
    FSOCKOPEN: Your server supports fsockopen.
    cURL: Your server supports cURL.
    SOAP Client: Your server has the SOAP Client enabled.
    SUHOSIN: Your server does not have SUHOSIN installed.

    ACTIVE PLUGINS:

    AMP: 0.7.2
    Beaver Builder Plugin (Lite Version): 2.1.3.4
    BP Activity Share: 1.5.0
    BP Better Messages: 1.9.7.5
    BP Disable Activation Reloaded: 1.2.1
    BP Easy Invitation Codes: 1.0
    BP Force Profile Photo: 1.0.7
    BP Friends Suggestions Widget: 1.1.0
    BP Messages Tool: 1.3
    BP Profile Search: 4.8.3
    BP xProfile Location: 1.6
    BuddyPress: 3.1.0
    Buddypress – Who clicked at my Profile?: 3.6
    BuddyPress Activity Autoloader: 1.0.2
    BuddyPress Activity Filter: 1.0.4
    BuddyPress Edit Activity: 1.0.9
    BuddyPress Featured Members: 1.1.0
    BuddyPress Member Reviews: 1.0.8
    BuddyPress Simple Terms And Conditions: 1.3
    Buddy Progress Bar: 1.0.3
    CB Change Mail Sender: 1.1
    Community Activity On profile: 1.0.5
    Conditional Profile Fields for BuddyPress: 1.2.1
    Crowdmentions: 1.0.3
    Email Users: 4.8.8
    Essential Grid: 2.2.4.1
    Events Manager: 5.9.4
    Glue for Yoast SEO & AMP: 0.4.3
    Invite Anyone: 1.3.20
    K Elements: 4.3.5.1
    Limit Login Attempts: 1.7.1
    Loco Translate: 2.1.4
    Mass Messaging for Buddypress – by Alkaweb: 1.1.2
    MediaPress: 1.4.1
    MediaPress – Media View Counter: 1.0.0
    MediaPress – myCRED Addon: 1.0.0
    MediaPress Featured Content: 1.0.2
    MediaPress Media Rating: 1.0.6
    MediaPress Set Profile Photo: 1.0.2
    myCRED: 1.7.9.6
    My Private Site: 2.14.1
    PHP code snippets (Insert PHP): 2.0.6
    Post Gallery: 2.2.7
    Regenerate Thumbnails: 3.0.2
    Site Reviews: 2.15.11
    Slider Revolution: 5.4.7.4
    Social Articles: 2.8
    Theme My Login: 6.4.16
    Use Google Libraries: 1.6.2.3
    W3 Total Cache: 0.9.7
    Wise Chat Pro: 1.9
    WP-Optimize: 2.2.4
    WPBakery Page Builder: 5.4.7
    WP ULike: 3.4
    Yoast SEO: 7.7.3

    // MediaPress Settings //

    active_components: sitewide,members,groups
    default_status: public
    active_statuses: public,private
    active_types: photo,video
    extensions: jpeg,jpg,gif,png,mp4,flv,mpeg,mp3,wmv,midi,zip,gz,doc,pdf,docx,xls
    size_thumbnail: 300,300,1
    size_mid: 400,800,1
    size_large: 600,1000,1
    single_media_size: original
    lightbox_media_size: original
    mpp_upload_space: 100
    mpp_upload_space_groups: 100
    show_upload_quota: 0
    show_max_upload_file_size: 1
    default_storage: local
    enable_remote: 1
    enable_remote_file: 0
    download_remote_file: 0
    enable_oembed: 1
    enable_debug: 0
    enable_gallery_archive: 1
    gallery_archive_slug: galeria-viveswinger
    gallery_permalink_slug: galeria-viveswinger
    sitewide_active_types: photo,video
    sitewide_photo_gallery_default_view: default
    sitewide_video_gallery_default_view: default
    has_gallery_directory: 1
    activity_upload: 1
    activity_disable_auto_file_browser: 0
    autopublish_activities: add_media
    activity_photo_default_view: default
    activity_video_default_view: default
    show_orphaned_media: 0
    delete_orphaned_media: 1
    activity_media_display_limit: 6
    members_active_types: photo,video
    members_enable_type_filters: 1
    members_photo_gallery_default_view: default
    members_video_gallery_default_view: default
    groups_active_types: photo,video
    groups_photo_gallery_default_view: default
    groups_video_gallery_default_view: default
    enable_group_galleries_default: yes
    contributors_can_edit: 1
    contributors_can_delete: 1
    groups_enable_my_galleries: 1
    galleries_per_page: 24
    media_per_page: 24
    media_columns: 4
    gallery_columns: 4
    show_gallery_description: 0
    show_media_description: 0
    enable_audio_playlist: 1
    enable_video_playlist: 1
    gdoc_viewer_enabled: 1
    enable_media_comment: 1
    enable_gallery_comment: 1
    load_lightbox: 1
    enable_activity_lightbox: 1
    enable_gallery_lightbox: 1
    enable_lightbox_in_gallery_media_list: 1
    mppftc_enabled_for: media,gallery
    mppftc_enabled_components: members,groups
    mppftc_enabled_types: photo
    mppftc_button_ui_places: single_media,lightbox,single_gallery,gallery_home
    mppftc_show_in_user_header: media_list
    mppftc_show_in_group_header: media_list
    mppftc_show_header_media_in_lightbox: 1
    mppftc_header_item_limit: 5
    mpp-rating-rateable-components: sitewide,members,groups
    mpp-rating-rateable-types: photo,video
    mpp-rating-required-permission: loggedin
    mpp-rating-appearance: single_media,light_box,single_gallery
    media_view_counter_count_uploader_views: 0
    media_view_counter_label_views: Vista %d veces

    // End of MediaPress Settings //

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on July 12, 2018 at 12:26 pm #16287

    Hi Oscar,
    I don’t see any issue with your setting.

    is that happening for all the image files or happened for only one.

    I am not sure of the reason but it happened earlier, can you please try uploading the file and see if you can predictably re-create it.

    This is something I haven’t seen with MediaPress earlier, so I need a way to re create it.

    Thank you
    Brajesh

You must be logged in to reply to this topic.

This topic is: not resolved