|
|
|||||||
Attention: Last reply in this thread was more than 18 Years ago |
|
|
Thread Tools |
|
#1
10-25-2006, 05:00 AM
|
||||
|
||||
Safe Mode Requirement
I notice that one of the requirements is "safe mode off." Is this new for 2.1.2, or has this always been a requirement for 'plog? the reason I ask is one of our servers got hacked over the weekend, and it looks like running PHP without safe mode was the culprit. So I'm looking at having to enable safe mode on all my sites. I got a couple of them fixed, uploading attachments still works, etc. Even got vbSEO working in safe mode, with a few changes to .htaccess.
But 'plog is installed on the one site I haven't switched to safe mode yet. What features of 'plog rely on safe mode being off? -- hugh 
|
|
#2
10-25-2006, 05:54 AM
|
||||
|
||||
|
Safe mode being off has always been a requirement. It's just listed again with the other requirements. IMHO if anyone wants a gallery, storing files in a database or restricted directory isn't the way to go, as it's too much overhead or lacks flexibility. Personally speaking, I don't think PHP not in safe mode was the problem with your server being hacked. It's more likely that it was due to a bad script or old version of something or other. PhotoPlog needs safe mode off to process files. If you take a run through the code, it is unlikely, though not impossible as I'm not perfect, that you will find a tainted variable. If you have mod_rewrite abilities, this has always been a gem to stick in an htaccess file:
Code:
Content visible to registered users only.
__________________
Please use the forums for support, feature requests, and similar such things. Support does not include custom code, custom template edits, or third-party modifications. PMs and emails to me should be for private information only, such as login information. If you PM or email me a support question, chances are good that I'll ignore it.  Thanks.  While the work or play is on, it is a lot of fun if while you are doing one you don't constantly feel that you ought to be doing the other. -- Franklin Pierce Adams
|
|
#3
10-29-2006, 08:40 PM
|
||||
|
||||
|
Morgan - please feel free to move this into a different thread, I really don't want to clutter up the release thread with safe mode discussions!
Code:
Content visible to registered users only. Code:
Content visible to registered users only. Code:
Content visible to registered users only. -- hugh Last edited by cheesegrits; 10-29-2006 at 09:04 PM..
|
|
#4
10-29-2006, 09:15 PM
|
||||
|
||||
|
It gives an access denied when http:// is part of a query string.
__________________
Please use the forums for support, feature requests, and similar such things. Support does not include custom code, custom template edits, or third-party modifications. PMs and emails to me should be for private information only, such as login information. If you PM or email me a support question, chances are good that I'll ignore it. Thanks. While the work or play is on, it is a lot of fun if while you are doing one you don't constantly feel that you ought to be doing the other. -- Franklin Pierce Adams
|
|
#5
10-29-2006, 09:48 PM
|
||||
|
||||
|
Code:
Content visible to registered users only. -- hugh
|
|
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| GD2 and Safe Mode | billp | Pre-Sale Questions | 1 | 09-25-2007 04:43 AM |
| Safe Mode ON | bloggy | "How Do I..." Questions | 7 | 08-14-2007 06:32 PM |
| GD2 and 'safe mode' | boodog | Pre-Sale Questions | 1 | 07-17-2007 04:05 PM |
| Safe mode restriction in effect but safe mode is off | Magnumutz | Troubleshooting & Problems | 1 | 01-25-2007 04:03 PM |
