Php photo gallery TWG | JFUploader | TWG Flash upload | WFU | Forum
https://www.tinywebgallery.com/forum/

admin/index.php goes to 404
https://www.tinywebgallery.com/forum/php-photo-gallery-admin-f10/admin-index-php-goes-to-404-t3957.html
Page 1 of 1

Author:  acroglobal [ 18. Oct 2015, 17:03 ]
Post subject:  admin/index.php goes to 404

Same problem (new) on 3 long-time TWG installations: 2 with 2.0, one with 2.2 + 1.6-2.3 patch.

Example: irishnewengland.com/twg22/

This happens when logged in and using ADMINISTRATION link, or when inputting admin/index.php at browser address line.

Scripts seem to operate normally at front end, and we can create folders and upload files.

But unable to change config etc.

How can we fix this?

Thanks.

Author:  TinyWebGallery [ 18. Oct 2015, 21:18 ]
Post subject:  Re: admin/index.php goes to 404

If I got to http://www.irishnewengland.com/twg22/admin/index.php I see the administration.
Do you still have the problem?

Best, Michael

Author:  acroglobal [ 19. Oct 2015, 12:11 ]
Post subject:  Re: admin/index.php goes to 404

Michael:

Yes, now I get login screen, but upon logging in I land here:

http://www.irishnewengland.com/twg22/ad ... &sview=yes

and get 404 page again.

-DB

Author:  TinyWebGallery [ 19. Oct 2015, 23:57 ]
Post subject:  Re: admin/index.php goes to 404

Do you get any errors in the log file?

best Michael

Author:  acroglobal [ 20. Oct 2015, 15:38 ]
Post subject:  Re: admin/index.php goes to 404

No, no errors in the logfile. It just shows what appears to be a series of normal logins.

Author:  acroglobal [ 23. Oct 2015, 11:49 ]
Post subject:  Re: admin/index.php goes to 404

Received this from Dreamhost tech support:

------------
Hello,

Thank you for contacting DreamHost support!

There is a critical security issue with the way i fixed the error, and
you'll want to warn the developer about it...

So the problem can be found in the url of the 404 error when trying to
login at admin/index.php (not login.php)

http://www.irishnewengland.com/twg22/ad ... &sview=yes

Notice how view=no towards the end of the url. Change that to "yes" and
you will fix the 404 error.

http://www.irishnewengland.com/twg22/ad ... &sview=yes
--------------------------

Is that a change that needs to be made in the TWG script or ??

Author:  TinyWebGallery [ 23. Oct 2015, 22:19 ]
Post subject:  Re: admin/index.php goes to 404

Hi,

I cannot reproduce this at all.

And I don't know why this is a critical security error?
One setting seems to give a 404. Which is not a security issue ;).

Can you reproduce this?

Best, Michael

Author:  acroglobal [ 29. Oct 2015, 18:45 ]
Post subject:  Re: admin/index.php goes to 404

Michael:

Here is the debug file from twg2 on topnewenglandvacations.com as of right now:

-------------
05.13.2014 9:54:12 - Security tokens did not match. Session: 0 : param 1392230470954712714829000041046 no further actions are allowed.
05.25.2014 8:53:16 (en) - XML error increaseCount: XML declaration not finished at line 1 (./xml/Nova Star Christening 12 May 2014_image_counter.xml was renamed to ./xml/Nova Star Christening 12 May 2014_image_counter.xml_20140525085316.bak - please check this file if you want to restore your data) - DATA:_?xml version='
05.25.2014 8:54:00 (en) - XML error increaseCount: XML declaration not finished at line 1 (./xml/Nova Star Christening 12 May 2014_image_counter.xml was renamed to ./xml/Nova Star Christening 12 May 2014_image_counter.xml_20140525085400.bak - please check this file if you want to restore your data) - DATA:_?xml version='
05.25.2014 8:58:49 (en) - XML error increaseCount: XML declaration not finished at line 1 (./xml/Nova Star Christening 12 May 2014_image_counter.xml was renamed to ./xml/Nova Star Christening 12 May 2014_image_counter.xml_20140525085849.bak - please check this file if you want to restore your data) - DATA:_?xml version='
12.08.2014 15:39:26 (en) - XML error increaseCount: XML declaration not finished at line 1 (./xml/Nova Star Christening 12 May 2014_image_counter.xml was renamed to ./xml/Nova Star Christening 12 May 2014_image_counter.xml_20141208153926.bak - please check this file if you want to restore your data) - DATA:_?xml version='
06.17.2015 1:51:05 (en) - XML error increaseCount: XML declaration not finished at line 1 (./xml/Nova Star Christening 12 May 2014_image_counter.xml was renamed to ./xml/Nova Star Christening 12 May 2014_image_counter.xml_20150617015105.bak - please check this file if you want to restore your data) - DATA:_?xml version='
10.29.2015 9:28:23 (en) - ERROR 8 in ns.com/twg2/admin/_include/fun_admin.php, line 399: Undefined index: action
10.29.2015 9:28:23 (en) - ERROR 8 in ns.com/twg2/admin/_include/fun_admin.php, line 399: Undefined index: action
-----------------

We were able to access this by re-uploading the original .htusers.php file, logging in with the default login, changing password but then STAYING LOGGED IN.

(Because we're unable to log back in to admin after changing password.)

Does that file tell you anything about this problem?

-DB

Author:  TinyWebGallery [ 29. Oct 2015, 22:42 ]
Post subject:  Re: admin/index.php goes to 404

No.

ERROR 8 in ns.com/twg2/admin/_include/fun_admin.php, line 399: Undefined index: action

is strange.

So you run the latest version?

Best, Michael

Author:  acroglobal [ 30. Oct 2015, 12:45 ]
Post subject:  Re: admin/index.php goes to 404

Michael:

The version at topnewenglandvacations.com for which I sent the error log earlier is 2.0.

But here is error log from V2.3 installed this week at davidhboggs.com:

-----------
10.30.2015 3:33:49 (en) - ERROR 8 in s.com/twg23/admin/_include/fun_admin.php, line 399: Undefined index: action
10.30.2015 3:33:49 (en) - ERROR 8 in s.com/twg23/admin/_include/fun_admin.php, line 399: Undefined index: action
-----------

Here is the code beginning at line 399 of fun_admin.php:

-----------
if ($GLOBALS['__GET']["action"] != 'admin' && $GLOBALS['__GET']["action"] != 'login' ) {
if ($GLOBALS['__POST']) {
$user=stripslashes($GLOBALS['__POST']["user"]);
if($user=="" || $GLOBALS['__POST']["home_dir"]=="") {
show_error($GLOBALS["error_msg"]["miscfieldmissed"]);
}
if($GLOBALS['__POST']["pass1"]!=$GLOBALS['__POST']["pass2"]) show_error($GLOBALS["error_msg"]["miscnopassmatch"]);
$data=find_user($user,NULL);
if($data!=NULL) show_error($user.": ".$GLOBALS["error_msg"]["miscuserexist"]);
// checks if a users has a | in the folder - this is only allowed for front end users.
if (checkFolder($GLOBALS['__POST']["home_dir"],$GLOBALS['__POST']["permissions"])) {
show_error($GLOBALS["error_msg"]["multiplefolder"]);
}
if (!checkFolderContent($GLOBALS['__POST']["home_dir"])) {
$GLOBALS['__POST']["home_dir"] = ".";
}
}
}
-----------

Is that helpful at all?

-DB

Author:  TinyWebGallery [ 31. Oct 2015, 02:11 ]
Post subject:  Re: admin/index.php goes to 404

What is in the url (the request) if you get this error?

Best, Michael

Author:  acroglobal [ 1. Nov 2015, 13:30 ]
Post subject:  Re: admin/index.php goes to 404

Michael:

When I start at

http://www.davidhboggs.com/twg23/

and click "LOGIN"

I land here:

http://www.davidhboggs.com/twg23/index. ... &twg_show=

And if I then click the "Administration" link which goes to here:

http://www.davidhboggs.com/twg23/admin/index.php

on this site, I then land on "418 unused" error page.

That is the click that produces the error in the log.

-DB

Author:  TinyWebGallery [ 1. Nov 2015, 22:39 ]
Post subject:  Re: admin/index.php goes to 404

I do exactly the same and have no problem at all. On none of my systems.

Which php version do you use?

Best, Michael

Author:  acroglobal [ 3. Nov 2015, 13:32 ]
Post subject:  Re: admin/index.php goes to 404

davidhboggs.com is running PHP 5.6.10 with zend engine 2.6.0

Author:  TinyWebGallery [ 3. Nov 2015, 13:44 ]
Post subject:  Re: admin/index.php goes to 404

o.k. I have not tested with 5.6 yet. I need to test with this first.

Best, Michael

Page 1 of 1 All times are UTC + 1 hour [ DST ]
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/