Icy Phoenix

from last time i applied patch, there is an error that i am not able to figure out. I have done so many things, even re update my lastest IP, but still don't know why.
in my forum there are old threads include some files (about 1-4 mb) and I allow them able to download.

for example: in post there is a link to down load it "", it worked before, but now when i click on it, it gives me an error page. (these files in CHMOD 777 folder)

there is another error. some stream attachment files open/direct to same 1 file.

and all my flash, google, youtube to mp3 bbcodes are not show in posting.php. I download IP package last night and update those bbcode files, but those not showing up either.

Any suggestion, will be appreciate it.

Maybe check the .htaccess file in the directory where files are located. I know latest IP now has a "deny from all" in htaccess for the cache directory, which is a bit extreme, given it has an index file which stops people browsing its contents... (and you can disable directory listing on your server).

moreteavicar wrote: [View Post]

Maybe check the .htaccess file in the directory where files are located. I know latest IP now has a "deny from all" in htaccess for the cache directory, which is a bit extreme, given it has an index file which stops people browsing its contents... (and you can disable directory listing on your server).

moreteavicar, I could not find it in my server? do you mean my host cpanel?

Anyone please helps. I also noticed that I can't add new page from CMS. I got 404 error when viewed my new page.

xmenfile wrote: [View Post]

moreteavicar wrote: [View Post]

Maybe check the .htaccess file in the directory where files are located. I know latest IP now has a "deny from all" in htaccess for the cache directory, which is a bit extreme, given it has an index file which stops people browsing its contents... (and you can disable directory listing on your server).

moreteavicar, I could not find it in my server? do you mean my host cpanel?

Yes, you need to use your cpanel or whatever you normally use to administer files and upload icy phoenix. Check / upload here htaccess for your root folder and folders where files are stored. Actually, check first that your cms page and files actually exist (in cpanel!).

Also when you add new cms page, did you add it as an actual file, or is it within SQL? Have another try, see if you get an error "cannot create file" - your host might have disable fopen privileges. (There is another possibility, something called "open_basedir restriction", usually only set when safe mode is on - this sometimes does funny things to some file access functions, and file references within the script need to be absolute links, rather than relative like phpbb_root_path... but we'll rule that out for the moment, because you usually get a specific error message about it).

moreteavicar wrote: [View Post]

xmenfile wrote: [View Post]

moreteavicar wrote: [View Post]

Maybe check the .htaccess file in the directory where files are located. I know latest IP now has a "deny from all" in htaccess for the cache directory, which is a bit extreme, given it has an index file which stops people browsing its contents... (and you can disable directory listing on your server).

moreteavicar, I could not find it in my server? do you mean my host cpanel?

Yes, you need to use your cpanel or whatever you normally use to administer files and upload icy phoenix. Check / upload here htaccess for your root folder and folders where files are stored. Actually, check first that your cms page and files actually exist (in cpanel!).

Also when you add new cms page, did you add it as an actual file, or is it within SQL? Have another try, see if you get an error "cannot create file" - your host might have disable fopen privileges. (There is another possibility, something called "open_basedir restriction", usually only set when safe mode is on - this sometimes does funny things to some file access functions, and file references within the script need to be absolute links, rather than relative like phpbb_root_path... but we'll rule that out for the moment, because you usually get a specific error message about it).

you know what i misunderstood when you said "disable", I thought there is a control panel or configuration where I can click disable it.
Anyway i have deleted .htaccess files and even uploaded IP newest version htaccess also, but still not working.

Anyone? I am still having this problem, my users are not able to download anything. I have upload current IP .htaccess to my server, that did not fix it and i have removed .htaccess from files and download folders, then it still not fix too. so I have upgraded my IP again and not suprised. It still not fix my problem. Can anyone tell what else i have to do? I appreciate it.

I've tried to see with winmerge in the latest IP pafile db files if any of MG's changes should cause this, but nothing looks wrong, apart from, maybe the change of an image variable from $images['link'] to $images['forum_link'], which might explain the images in downloads bug (I could be wrong). There has been a change of definition of the pafiledb path, so that the actual path is declared, rather than a pre-defined constant string, but this is all above board.

Have you checked your pafiledb database to see if it still holds record of your files? Do your files exist in the directories?

Another question - have you changed host? Are all these files quite big - in other words, do you know for sure that the sizes of these files are below the maximum file size your host allows you to transfer? Have you tried simply trying to download a file directly from your downloads directory, using your ftp client / cpanel? There are a number of reasons that might explain this problem.

Just found something - where are these files located? If they are on a remote server, MG applied a security patch for remote servers, although the fix is in relation to remote images.

Another thing in IP27 is the creation of a new function in pafiledb/includes/functions_pafiledb.php: remote_filesize($url)
Yet nothing in IP27 uses it!

The obvious might be to swap back the old pafiledb files and see if it works, mainly the includes directory, modules directory and pafiledb_common.php, since this is where the changed files are. From what I can see of the security fixes, i.e. the change of the pafiledb path and remote file image handling, I can't see how pafiledb was vulnerable. All previous vulnerabilities, mainly relating to $module_root_path were fixed back in XS days...

BTW, why you not reply here?

moreteavicar wrote: [View Post]

I've tried to see with winmerge in the latest IP pafile db files if any of MG's changes should cause this, but nothing looks wrong, apart from, maybe the change of an image variable from $images['link'] to $images['forum_link'], which might explain the images in downloads bug (I could be wrong). There has been a change of definition of the pafiledb path, so that the actual path is declared, rather than a pre-defined constant string, but this is all above board.

Have you checked your pafiledb database to see if it still holds record of your files? Do your files exist in the directories?

Another question - have you changed host? Are all these files quite big - in other words, do you know for sure that the sizes of these files are below the maximum file size your host allows you to transfer? Have you tried simply trying to download a file directly from your downloads directory, using your ftp client / cpanel? There are a number of reasons that might explain this problem.

moreteavicar,

these files are in files folder, these are uploaded by my users using attachment mod and they are about 2 - 6 mb. I have checked and they are still in files folder directory and they are downloadable by using ftp client. and I have not changed host, but i am thinking about it.

PS: I am sorry moreteavicar regard to the Shout box error post. I have crewed up my forum big time and I am the only one doing it. I'll try it later and let you know. Thank you so much for your helps for million times.

i got this far and it really killing me. it works with files less then or equal to 4mb, event though i increased Server memory and Download confirguration to 16MB. Is there any place else to set the limit?

Here is another funny thing, i uploaded 7MB file name 'abc' and it saves in pafiledb/uploads folder as ie "13278euew2343242i" file, but when i got an error message, it tells the 'abc' is not exist or i dont have permission.

xmenfile wrote: [View Post]

PS: I am sorry moreteavicar regard to the Shout box error post. I have crewed up my forum big time and I am the only one doing it. I'll try it later and let you know. Thank you so much for your helps for million times.

Keine problem, just wanted to know if it worked, and thus if it could be changed it to solved ;)

xmenfile wrote: [View Post]

i got this far and it really killing me. it works with files less then or equal to 4mb, event though i increased Server memory and Download confirguration to 16MB. Is there any place else to set the limit?

Here is another funny thing, i uploaded 7MB file name 'abc' and it saves in pafiledb/uploads folder as ie "13278euew2343242i" file, but when i got an error message, it tells the 'abc' is not exist or i don't have permission.

In the first place, the server memory option in your php.ini file is just for the script memory, it has nothing to do with file management ;)

The problem you're having is probably because of an internal coding "bug" in pafiledB which by default doesn't allow files >6Mb, and you'll be please to know its easily solved! Just scurry along to this post:
http://www.icyphoenix.com/viewtopic.php??t=2206&p=26577#p26577

That fixed 1 of the issues. with download mod, how come i am not able to download mp3 or wma files? I tried the other route which is url bbcode like this but not works. i get blank page.

So many issues for one topic! :P

The first thing I can think of is that maybe your host blocks the transfer of media files, I had this problem on a free host. The way to check this for sure is, if you know the name and location of the media file, try downloading it by typing it's URL in your browser.

I think there is also a matter of allowed extensions in ACP, but I'll assume you've checked all that.

BTW

Quote:

funny thing, i uploaded 7MB file name 'abc' and it saves in pafiledb/uploads folder as ie "13278euew2343242i" file,

Forgot to explain that the reason the filename is different is for security. You wouldn't want somebody using pafidb to try and upload a "nasty file" which could be ran as a script, or used as an include (not necessarily on your own site either, they might try and hotlink to it when trying to inject code into other sites they try and hack). So, pafildb stores the real name in database, and gives the file some randomly generated filename so that the uploader doesn't have any chance of trying to remotely accessing /executing/ linking the file, all they can do is download it from within pafiledb.

moreteavicar wrote: [View Post]

So many issues for one topic! :P

The first thing I can think of is that maybe your host blocks the transfer of media files, I had this problem on a free host. The way to check this for sure is, if you know the name and location of the media file, try downloading it by typing it's URL in your browser.

I think there is also a matter of allowed extensions in ACP, but I'll assume you've checked all that.

Yes, I have checked it and these are not allowed "php, php3, php4, phtml, pl, asp, aspx, cgi". I also got a respond from my host that they are not blocking media files.