News:

Want to get involved in developing SMF, then why not lend a hand on our github!

Main Menu

Download System

Started by SMFHacks.com Team, October 31, 2007, 06:55:37 PM

Previous topic - Next topic

The_Wii_Nes_Boy


vbgamer45

The only thing I know about that is those two php settings that would cause that issue.
Community Suite for SMF - Take your forum to the next level built for SMF, Gallery,Store,Classifieds,Downloads,more!

SMFHacks.com -  Paid Modifications for SMF

Mods:
EzPortal - Portal System for SMF
SMF Gallery Pro
SMF Store SMF Classifieds Ad Seller Pro

The_Wii_Nes_Boy

I will try copying php.ini in to each folder this package uses and see if that fixes it, if not I will contact my host and ask them whats going on.

The_Wii_Nes_Boy

Well I copied php.ini in to each folder that the Download Syserm uses and I can upload larger files.

Thanks for the help vbgamer45, oh and nice work this mod work great keep up the hard work :)

vbgamer45

Thanks! Keep the feature requests coming the more I get the better the mod will be.
Community Suite for SMF - Take your forum to the next level built for SMF, Gallery,Store,Classifieds,Downloads,more!

SMFHacks.com -  Paid Modifications for SMF

Mods:
EzPortal - Portal System for SMF
SMF Gallery Pro
SMF Store SMF Classifieds Ad Seller Pro

Thunderace

This is a duplicated post .. I firstly put it into a topic I found about mod_security so please excuse that.


I'm having a problem with the downloads package and mod_sec.

The package is trying to use ;id in the querystring which is being seen quite correctly as a system command injection.

Matched signature <;id>"] [severity "CRITICAL"]

I'll certainly not gimp mod_sec as it's there for the reasons I put it there .. any suggestions?

vbgamer45

Known issue and a stupid rule you can disable mod_security in order to let the download system work.
Community Suite for SMF - Take your forum to the next level built for SMF, Gallery,Store,Classifieds,Downloads,more!

SMFHacks.com -  Paid Modifications for SMF

Mods:
EzPortal - Portal System for SMF
SMF Gallery Pro
SMF Store SMF Classifieds Ad Seller Pro

Thunderace

Well thanks for the reply vb but I don't think it's a great idea to turn off a powerful and well respected security tool in order that a mod can work.

I tend to follow a rule of modifying my scripts to pass security rather than lower my security to match a script.

Thunderace

I think I have solved this quite simply for myself and below you will find what I did in case anyone else experiences the difficulty.

vbgamer45  if you see something I have missed would you mind letting me know?

Only 4 files in the downloads package are affected: -

Downloads.php
Downloads2.php
Downloads.template.php
Downloads2.template.php

1) Open Downloads.php and Downloads2.php

Replace all instances of $_REQUEST['id'] with $_REQUEST['fid']

2) Open all 4 files and replace ;id with ;fid

To clarify ;(colon)id with ;(colon)fid

There is no reasoning behind fid, I just added an f to avoid the mod_sec problem.

Finally and most importantly thanks to vbgamer45 for taking the time to write and support this great module.

Rob

.HuNTeR.

i had a problem with this download system and mod security too
and i replaced all ; with & and the problem solved for all who may be have same problem

The_Wii_Nes_Boy

Keep receiving this error pop up in the error log,  Any idea what it means

8: Undefined variable: 8
File: /****/********/public_html/Forums/Themes/default/Downloads.template.php (mainview sub template - eval?)
Line: 192


Once again thanks for the help :D

Thunderace

Quote from: The_Wii_Nes_Boy on January 09, 2009, 05:37:16 AM
Keep receiving this error pop up in the error log,  Any idea what it means

8: Undefined variable: 8
File: /****/********/public_html/Forums/Themes/default/Downloads.template.php (mainview sub template - eval?)
Line: 192


Once again thanks for the help :D

Line 192 (if you are looking at the same code as me) has ..

$$file['ID_MEMBER']

I doubt that is really a variable variable.

Perhaps it should just be $file['ID_MEMBER']

I'm no expert on this code btw I just happen to be looking at this mod atm.

AlesE

Working fine now.

But I have to disable mod_security (apache2). Very bad. Security lost.

The_Wii_Nes_Boy

The line is.....
if ($g_manage || $g_delete_own && $$file['ID_MEMBER'] == $ID_MEMBER)

Any one else got any info on this?

vbgamer45

Yeah it should be

      if ($g_manage || $g_delete_own && $file['ID_MEMBER'] == $ID_MEMBER)
Community Suite for SMF - Take your forum to the next level built for SMF, Gallery,Store,Classifieds,Downloads,more!

SMFHacks.com -  Paid Modifications for SMF

Mods:
EzPortal - Portal System for SMF
SMF Gallery Pro
SMF Store SMF Classifieds Ad Seller Pro

vbgamer45

1.1.5 Released
!Fixed an error in 1.1.x of SMF on template page a $$ variable
+Added editor for description for adding/editing downloads SMF 1.1.x
Community Suite for SMF - Take your forum to the next level built for SMF, Gallery,Store,Classifieds,Downloads,more!

SMFHacks.com -  Paid Modifications for SMF

Mods:
EzPortal - Portal System for SMF
SMF Gallery Pro
SMF Store SMF Classifieds Ad Seller Pro

codnerd

I switched hosting, and everyone is getting this error when uploading files:

"You need to enter a download title."

Over 10 people complained to me about this already. How do I fix this?


The_Wii_Nes_Boy

Quote from: codnerd on January 10, 2009, 02:41:01 PM
I switched hosting, and everyone is getting this error when uploading files:

"You need to enter a download title."

Over 10 people complained to me about this already. How do I fix this?

You will need to reconfigure your php.ini file.

vbgamer45

Quote from: codnerd on January 10, 2009, 02:41:01 PM
I switched hosting, and everyone is getting this error when uploading files:

"You need to enter a download title."

Over 10 people complained to me about this already. How do I fix this?


Yeah that occurs if your php settings are set to the default which only allow max of 2mb. You can increase the upload file size and max post size varaibles.
Community Suite for SMF - Take your forum to the next level built for SMF, Gallery,Store,Classifieds,Downloads,more!

SMFHacks.com -  Paid Modifications for SMF

Mods:
EzPortal - Portal System for SMF
SMF Gallery Pro
SMF Store SMF Classifieds Ad Seller Pro

codnerd


Advertisement: