[plugin] [ORPHAN] ebl_Upload Version 3

saccade · 2009-06-08 08:53:36

Another problem:

ebl_upload seems to have problems with installs in a protected directory when using another browser than IE.

In a private website – installed in a protected directory – I installed ebl_upload.
When working in this site using Firefox I already have logged in with my login and password and saved it in the browsers memory. Everything works well so far, but:
When uploading files with ebl_upload I can choose those files but during upload the login data is asked for again (with a different pop-up-window: the one of IE!). After entering data the first file in the upload list will be uploaded and reported “completed”. After that ebl_upload is frozen – together with the whole browser (Firefox). (Seems very reasonable: password has been “hijacked” by IE and obviously doesn’t have any use for FF.)

Workaround: Use IE (but I don’t want to!).

TheEric · 2009-06-08 19:46:57

Protected Directory? Are you using something like htaccess/htpasswd to protect the directory? If that’s the case, then it will not work. The IE Player thinks of the flash SWF as part of the browser and shares the sessions/cookies/etc, whereas FF/Gecko do not. I created a solution that passes the session ID to the flash player upon invocation, and compares the session variable when the SWF attempts to upload. This only works within TXP, but will not work with any apache based authentication.

saccade · 2009-06-08 20:47:18

That’s exactly what happens: I have a private txp-install, within a htaccess/htpasswd-protected directory.
This works fine with IE. No problems there. (Is this what you mean with “passes … compares …”?)

But it fails to work with FF. What I’m wondering about: why does it ask for password with the IE-dialogue? And if it asks, why can’t it pass the data too?

Do I understand correctly: It will work if I place password_protection within txp?

Isn’t there any solution which opens htaccess-protection for FF-users too?

TheEric · 2009-06-08 20:55:02

It won’t work for any situation where there is a htaccess/htpasswd protected directory. Flash acts as a “new” browser and pass the authentication required for it to process. It’s made to work in only one instance (TXP Admin), but nothing else. This is the only instance where IE gets it right, and Firefox doesn’t. There is no way to fix this currently, without a chunk of custom code.

Last edited by TheEric (2009-06-08 20:58:31)

saccade · 2009-06-08 22:39:54

What about the following workaround? (I tried this and it seems to work – but I’m not firm in those things, maybe there are cautions)

Note: This is only for those who want htaccess/htpasswd-protection and FF and have password-protected their txp install directory!

un-protect the two subdirectories “images” and “files” by placing a .htaccess-file with the following lines:

Order Deny,Allow 
Allow From All 
Satisfy Any

Maybe “Satisfy Any” is the only line needed.

And of course this will make your subdirs accessible and non-protected! Only use it if that is not a problem.

Last edited by saccade (2009-06-08 22:45:54)

TheEric · 2009-06-08 22:42:52

That disables the password protection in your protected directory.

Last edited by TheEric (2009-06-08 22:43:04)

saccade · 2009-06-08 22:52:40

Yes, it should :) but only partly in those two subdirs where uploaded images and files are saved.
The rest (client-side and admin-side) is still password-protected.

Of course one should carefully reason if this is suitable. Especially for “files” (downloads!) I’d think twice! They could be taken away by guessing filenames.

Last edited by saccade (2009-06-08 22:58:10)

masa · 2009-06-16 02:37:40

I’m having a problem with 3.0.1:

I was going to upload a 2.8MB zip archive, but got a file too large error. I checked in advanced prefs and sure enough Maximum file size of uploads was still at 2.000.000 bytes.
So I increased that to 40.000.000 bytes, yet when trying to upload that same archive I still get the file too large error.

Using a different browser doesn’t help.

Any ideas?

joebaich · 2009-06-16 02:50:30

Hello Martin,

The current upload size limit could well be determined by your hosts php.ini file. You can normally override this in your TXP installation’s .htaccess file.

Joe

TheEric · 2009-06-16 03:02:59

joebaich wrote:

The current upload size limit could well be determined by your hosts php.ini file. You can normally override this in your TXP installation’s .htaccess file.

Exactly as Joe said. A simple way to check to see what the limits are is to create a showinfo.php file with the following :

<?php phpInfo(); ?>

It should show what the upload limit is. The htaccess method should change whatever the max is set to.

masa · 2009-06-16 03:39:52

Joe and Eric,

thanks for the replies.

My PHP info shows:

upload_max_filesize 40M
php_value post_max_size 40M

… so that shouldn’t be a problem. (I tried the .htaccess fix just in case, but to no avail.)

I did some further testing and txp’s built in upload gets the job done eventually without problems. On the other hand EBL Upload seems to hang on to the former limit set in the advanced prefs: up to 2MB no problem, but anything larger is still refused.

Could that value be cached somewhere?

TheEric · 2009-06-16 05:38:55

Check the htaccess file within the actual document root. e.g., “domain.com/”

masa · 2009-06-16 06:31:53

The htaccess file contains only the standard Textpattern rules plus the following:

<IfModule mod_security.c>
	SecFilterEngine Off
	SecFilterScanPOST Off
</IfModule>

…which were necessary to make the plugin work with mod_security on Textdrive.

Adding the lines as suggested by Joe didn’t make any difference.

masa · 2009-06-16 07:14:40

I went on to experiment with another site, also on Textdrive, where I had been using ebl_upload for images without problems.

I had never attempted to upload files with it before on that install, so first thing I did was to increase the upload limit to 40MB. However the result was the same: selecting any file larger than 2MB immediately throws up the message_“File to Large: Not added to queue”_.

Anything smaller than 2MB goes through without a hitch. Also using txp’s built-in upload works fine for larger files.

What could be the problem?

joebaich · 2009-06-16 11:11:28

masa wrote:

I went on to experiment with another site, also on Textdrive,

Martin,

The .htaccess file fix to alter the max file upload size doesn’t always work, it depends on your hosting company’s setup . I note that Textdrive has a procedure for creating your own php.ini file in their shared hosting. They provide a default ini file for one to use (PHP 5) which contains these lines:

file_uploads = On
upload_tmp_dir = /usr/local/www/php/tmp
upload_max_filesize = 40M

I note that you seem to have the 40M limit defined already though and it isn’t helping with Eric’s plug-in. I have normally only ventured into this area to limit the file upload size rather than to increase it when I had clients uploading ridiculously large image files on their WP based blog, for instance. In that case the .htaccess file fix worked but it wasn’t on Textdrive. On the odd occasion when I needed to increase the limit for a client, amending the TXP preferences setting worked for me but again, it wasn’t on a Textdrive hosted site. There was also an instance where we solved the problem by creating a .htaccess file in the equivalent directory to TXP files with the requisite lines.

Maybe Joyent could throw some light on the issue for you.

Joe

Last edited by joebaich (2009-06-16 11:24:42)

Textpattern CMS

Textpattern CMS support forum

#61 2009-06-08 08:53:36

Re: [plugin] [ORPHAN] ebl_Upload Version 3

#62 2009-06-08 19:46:57

Re: [plugin] [ORPHAN] ebl_Upload Version 3

#63 2009-06-08 20:47:18

Re: [plugin] [ORPHAN] ebl_Upload Version 3

#64 2009-06-08 20:55:02

Re: [plugin] [ORPHAN] ebl_Upload Version 3

#65 2009-06-08 22:39:54

Re: [plugin] [ORPHAN] ebl_Upload Version 3

#66 2009-06-08 22:42:52

Re: [plugin] [ORPHAN] ebl_Upload Version 3

#67 2009-06-08 22:52:40

Re: [plugin] [ORPHAN] ebl_Upload Version 3

#68 2009-06-16 02:37:40

Re: [plugin] [ORPHAN] ebl_Upload Version 3

#69 2009-06-16 02:50:30

Re: [plugin] [ORPHAN] ebl_Upload Version 3

#70 2009-06-16 03:02:59

Re: [plugin] [ORPHAN] ebl_Upload Version 3

#71 2009-06-16 03:39:52

Re: [plugin] [ORPHAN] ebl_Upload Version 3

#72 2009-06-16 05:38:55

Re: [plugin] [ORPHAN] ebl_Upload Version 3

#73 2009-06-16 06:31:53

Re: [plugin] [ORPHAN] ebl_Upload Version 3

#74 2009-06-16 07:14:40

Re: [plugin] [ORPHAN] ebl_Upload Version 3

#75 2009-06-16 11:11:28

Re: [plugin] [ORPHAN] ebl_Upload Version 3

Board footer