security code prob

Worker Joined: Jan 07, 2005 Posts: 163

hey has anyone else noticed if you logged in as admin the security graphics display, but if your not admin only the one in admin login is working, for some reason this affects the user info, admin login, the reg account logins and the download fetch graphic as well, any ideas?

Posted: Fri Apr 07, 2006 5:40 pm

What is the security graphic set to in config.php ?

Posted: Fri Apr 07, 2006 5:48 pm

its was 7 i put it on 0 now, it still only shows download code if I'm logged in

Posted: Fri Apr 07, 2006 5:54 pm

I am assuming you have some modifications to the downalods module in which case that would be normal?
Can you post a link to your site so I can take a look?

Posted: Fri Apr 07, 2006 6:20 pm

I have the fetching mod v1.0g

Posted: Fri Apr 07, 2006 6:35 pm

I dont recall it doing it until yesterday and only thing i did yesterday was upgrade sentinel

New Member Joined: Apr 07, 2006 Posts: 16

This happened to me as well when I installed yesterday. Frustrated, I also set it back to zero, deciding that I must have did something wrong. I decided to look into later. I would like to know more about this issue.

Thanks,
HL

Posted: Sun Apr 09, 2006 8:39 pm

well, heres something really weird I turned off flood protection and they all work again

Posted: Sun Apr 09, 2006 8:56 pm

also seems like flood protection is a bit sensitive Smile

Posted: Mon Apr 10, 2006 6:51 am

The fecth mod security graphic display for your downloads is independant of the global setting in config.php
It may be possible to turn it off in downloads but as I do not use this mod I do not have the files to confirm.

If you have the security graphic set to display in config.php and the image is not displaying, right click the blank image to locate the path to the image, the with your ftp software, ensure the image file properties are chmod 777

Regarding the flood protection problem, this has happened on occassion with some server configuration and I beleive it is being looked into.

Client Joined: Jan 29, 2004 Posts: 624

Guardian2003 wrote:

The fecth mod security graphic display for your downloads is independant of the global setting in config.php
It may be possible to turn it off in downloads but as I do not use this mod I do not have the files to confirm.

If you have the security graphic set to display in config.php and the image is not displaying, right click the blank image to locate the path to the image, the with your ftp software, ensure the image file properties are chmod 777

Regarding the flood protection problem, this has happened on occassion with some server configuration and I beleive it is being looked into.

The image file should be set to 777?

Posted: Fri May 05, 2006 9:29 am

all that is correct still doesnt work nor does the image work at all with the new dl mod EDL V21... i disabled the image and use text only seems to work. Maybe an issues somewhere.

Posted: Fri May 05, 2006 9:43 am

I presume that your host has the GD libraries enable?
You can test by inserting this

Code:

phpinfo()

into a php file and executing it on your site.

Posted: Fri May 05, 2006 11:12 am

GD is indeed enabled on my host, I see the security codes here, but not on my site. I'm at an impasse with this. What we need is a comprehensive FAQ about the causes and cures for missing security codes, a sort of checklist to run down til the problem is found and fixed. Is there code in the 3.1 patch that breaks the security code? Does the NS flood blocker break it? What about possible code in .htaccess? Third party theme files? Language files? I've looked everywhere I can think of and still no security code. How about a php snippet of code to test if the sec code will display and if not show the paths and diagnose the problem? lol

registered · Posted: Sat May 06, 2006 4:50 pm

Go to the properities of the image itself, and get that URL and load it into your browser. If it loads as text, you can determine if there are errors somewhere. Usually I find people have added code before the PHP output for their theme or blank lines to the beginning of their files. That will cripple any script that needs to send its own headers first (image generation)

Posted: Sat May 06, 2006 8:28 pm

The images loaded as images not as text.

Posted: Sat May 06, 2006 9:33 pm

I found the problem, it was a third party theme's my_header.php that was getting loaded ahead of everything else... nothing in it but a little javasc ript window open, I commented out in theme.php

Code:




//include("themes/ThirdPartyTheme/my_header.php");

and the security code showed right up. Simple little thing like that caused all this aggravation.