Loading...
 
Features / Usability

Features / Usability


Cache related problem

posts: 38

Hello

I've been running TW 1.8.1 and noticed suddenly permission errors related to the cache file. The same errors applied to a previous TW 1.8 hosted on the same server. Could you help with that?

Errors output can be seen at: http://haitipro.com/sit/

posts: 175 Canada

Hi,
If you go to system admin area you can clear out the cache and that should fix your problem.

Go from main menu, admin drop down, system admin.
OR yoursite/tiki/tiki-admin_system.php
Here you should see a place to empty the cache.

/modules/cache/ Empty

If you can not log in you can clear them out with ftp

See also,

precompiled templates installed

James


posts: 38

Clear the cache via ftp stop the error and I had a blank screen. To make the story short, I installed 1.8.2 to realize that I cannot edit html in the wiki pages and that chat & games wrer giving errors. cry

posts: 2881 United Kingdom

> rickdier:
> Clear the cache via ftp stop the error and I had a blank screen. To make the story short, I installed 1.8.2 to realize that I cannot edit html in the wiki pages and that chat & games wrer giving errors. cry
>
>

On Admin->Wiki there is a new option for HTML editing as its basically a securing risk allowing that for everyone. relates to CSRF and XSS issues.

Enable that new checkbox and you should be sorted.

Chat and Games, I dont know about, dont think they were touched inbetween versions. What error messages are those feature reporting?

Damian


posts: 2881 United Kingdom

> rickdier:
> Clear the cache via ftp stop the error and I had a blank screen. To make the story short, I installed 1.8.2 to realize that I cannot edit html in the wiki pages and that chat & games wrer giving errors. cry
>
>

On Admin->Wiki there is a new option for HTML editing as its basically a securing risk allowing that for everyone. relates to CSRF and XSS issues.

Enable that new checkbox and you should be sorted.

Chat and Games, I dont know about, dont think they were touched inbetween versions. What error messages are those feature reporting?

Damian


posts: 38

Games seem to be OK but chat gives this message:

Parse error: parse error in /home/..../lib/chat/chatlib.php on line 77

Fatal error: Call to a member function on a non-object in /home/.../tiki-chat.php on line 28

posts: 2881 United Kingdom

> rickdier:
> Games seem to be OK but chat gives this message:
>
> Parse error: parse error in /home/..../lib/chat/chatlib.php on line 77
>
> Fatal error: Call to a member function on a non-object in /home/.../tiki-chat.php on line 28
>
>

Hiya,

Ok like 77 on that chatlib refers to a query with a sort_mode function, now in 1.8.2 we had to modify the sortmode in tikidblib to perform some checking for SQL Injection vunerabilities. Can you tell me which database your connecting to (mysql,pg, or something) so that I can try and trace this routine down.

Also can you check that you have the latest lib/tikidblib.php

it should contain towards the top:
Copy to clipboard
// parse $sort_mode for evil stuff $sort_mode = preg_replace('/[^A-Za-z_,]/', '', $sort_mode); $sep = strrpos($sort_mode, '_'); // force ending to either _asc or _desc if ( substr($sort_mode, $sep)!=='_asc' ) { $sort_mode = substr($sort_mode, 0, $sep) . '_desc'; }


Thanks!

Damian


posts: 2881 United Kingdom

> rickdier:
> Games seem to be OK but chat gives this message:
>
> Parse error: parse error in /home/..../lib/chat/chatlib.php on line 77
>
> Fatal error: Call to a member function on a non-object in /home/.../tiki-chat.php on line 28
>
>

Hiya,

Ok like 77 on that chatlib refers to a query with a sort_mode function, now in 1.8.2 we had to modify the sortmode in tikidblib to perform some checking for SQL Injection vunerabilities. Can you tell me which database your connecting to (mysql,pg, or something) so that I can try and trace this routine down.

Also can you check that you have the latest lib/tikidblib.php

it should contain towards the top:
Copy to clipboard
// parse $sort_mode for evil stuff $sort_mode = preg_replace('/[^A-Za-z_,]/', '', $sort_mode); $sep = strrpos($sort_mode, '_'); // force ending to either _asc or _desc if ( substr($sort_mode, $sep)!=='_asc' ) { $sort_mode = substr($sort_mode, 0, $sep) . '_desc'; }


Thanks!

Damian


posts: 38
I found the code mentioned closer to the bottom than to the top. I'm using MySQL.

Upcoming Events

1)  18 Apr 2024 14:00 GMT-0000
Tiki Roundtable Meeting
2)  16 May 2024 14:00 GMT-0000
Tiki Roundtable Meeting
3)  20 Jun 2024 14:00 GMT-0000
Tiki Roundtable Meeting
4)  18 Jul 2024 14:00 GMT-0000
Tiki Roundtable Meeting
5)  15 Aug 2024 14:00 GMT-0000
Tiki Roundtable Meeting
6)  19 Sep 2024 14:00 GMT-0000
Tiki Roundtable Meeting
7) 
Tiki birthday
8)  17 Oct 2024 14:00 GMT-0000
Tiki Roundtable Meeting
9)  21 Nov 2024 14:00 GMT-0000
Tiki Roundtable Meeting
10)  19 Dec 2024 14:00 GMT-0000
Tiki Roundtable Meeting