we can understand that....but the real problem is we have to create some directories to put the photo_address.txt...descriptions.txt...the.css and the images and the icons etc. And what about the categories and all that stufff. Can you please give us the exact way you installed it on your server to do it work? All the directories and where they are. We work now for 7 hours on your ****** and we are realy getting realy upset now.

Why dont you give a real installation text with those scripts.
Thank you :rolleyes:

Here's what I have:

/Photo_Album.css --> World Readable
/cgi-bin/album.pl --> World Executable
/cgi-bin/album.cfg --> World Readable
/img/photo.gif --> World Readable
/img/album.gif --> World Readable
/Photo_Album/ --> World Writable
/Photo_Album/descriptions.txt --> World Writable [Optional]
/Photo_Album/subdir --> World Writable
/Photo_Album/somephoto.jpg --> World Readable
../logs/gallery.log --> World Writable
../auth_db --> World Readable

I think that's about it. If you turn off options like "notify" then you don't have to worry about things like photo_address.txt. I'd recommend turning all the "options" off and getting it to work that way, then turn on the ones you want. Should narrow things down.

Also, if you want to send me the web site layout, your config file, and your URL, I can probably help out. (You can PM or e-mail me with it.)

Sorry the install is so hard. Believe it or not, I have cleaned it up!

Cheers

Still have problems....i never saw something like that!!!!!

http://www.astro23.com/cgi-bin/astro/album.pl
http://www.astro23.com/cgi-bin/astro/album.pl?function=enter_desc
http://www.astro23.com/cgi-bin/astro/album.pl?slideshow=x
http://www.astro23.com/cgi-bin/astro/album.pl?function=upload

Here is the address of my UBB.
http://www.astro23.com
Take a look inside, it is a very big UBB with a big big traffic
I am in Montréal

It is working now here is what we did:

In album.pl

search

$albumprog=$webroot."/".$relalbum."/".$albumprog;

replace by:

$albumprog=$relalbum."/".$albumprog;

in album.cfg

search:

# Relative path to album.pl, from "webroot" as defined above.
relalbum=../cgi-bin

replace by:

# Url path to album.pl
relalbum=http://yoursite.com/cgi-bin

Interesting. Thanks for turning debug on, it was helpful, though you seem to have found a solution. The way it should work is:

webroot=http://www.astro23.com/ubb/photo

relalbum=../../cgi-bin

That should work as well, with no code changes required. I'm not sure what else will break if you use relalbum and $albumprog like you are. Maybe nothing, but maybe something... They just weren't designed to be used that way.

As a side note, it looks like you're using 3.0, not 3.1 (3.1 is better, it fixes a number of bugs). You can get 3.1 at http://perl.cdnarmy.ca.

Cheers

<FONT COLOR="#000000" SIZE="1">[ June 16, 2001 05:57 PM: Message edited by: bobbitt ]</font>

yes but depend where you put your directories. If you let the code as his, we can not put the directories somerhelse the cgi-bin....so that way we did it.

What a day!!!!! lol Thank you anyway this is a nice hack

Not for nothing but the title of this forum is "V6 Mods in Beta". You didn't buy his "unfinished" software, so try and be nicer to someone writing you free software.


Great hack BTW. I have been using an SQL/Cold Fusion script on my site for my gallery, but I am trying to move away from Cold Fusion.

Also you mentioned you used Thotor, a thumbnail generator to create the thumbnails, how hard would it be to automate the thumbnail creation of .jpgs. What I could love is, Someone uploads a say, 600X300 picture, then a 200X100 thumbnail would be generated. Then if someone uploaded a 600X600 picture a 200X200 thumbnail would be made, always maintaining Aspect ratios. The way my gallery is now, the viewer has to wait for every full sized picture to load to see a new pic.

Thanks and Keep up the good work.

I'd love to generate thumbnails as part of the script. What I really want to do is generate them on the fly, but that would probably be a performance issue.

So I guess I'm in the market for a freeware cross platform command line thumbnail generator to tie in. Haven't found one yet.

Still, it's a good idea though. If no corresponding thmb_ file exists, just generate it and keep going. That way the first time you view pictures, it may be a bit slower, but after that the thumnails will already be there.

If anyone knows of a thumbnail tool that fits the bill, please let me know!

Thanks

Hi Bobbit
Take a look there
http://astro23.com/cgi-bin/astro/album.pl?album=Signatures
We just force the big image to show in 30 x 30 Pixels and it is ok for now. Of course the images keep the bytes weigth of the full size but for now until we find a better solution it is doing the job for me. Anyway, we keep working on it and i'll tell you if we find a permanent solution. Thanks again

Yeah, that's not a bad idea. I thought about it, but it the downside is that it loads the full image for each picture. The upside is that once it's loaded, caching will make browsing the album very fast. I think I'll make it an option.

I run this on one album that has about 6,000 pictures in it, so pre-loading the full size images would be a pain. But for smaller albums, I can see it would do the trick.

Thanks

FYI, some users have been having trouble editing the .cfg or .pl files. Apparently, some editors save the file in such a way that it corrupts it, and causes server errors...

Version 3.2 is now available at http://perl.cdnarmy.ca. Updates are a bit of code cleanup, some bug fixed, and the display has been updated a bit. As always, if you have any problems, just let me know.

Cheers

Nice work Mike. Once I found my server specific problem etc I upgraded to this version edited what I needed and worked like a charm. I even got the style sheets going. Great Job!!

http://www.reeftalk.com/cgi-bin/album.pl

Chuck

Note: omegatron found a bug in 3.2 which has just been fixed. If you downloaded 3.2 before this message was posted, please re-download.

I hope to have some time this week to start making life for album users easier, thanks for bearing with me...

Anybody else find this GAPPING security whole in this one??? Or did I use a bad practice when implementing this one...

I have my Photo Root dir to:
C:/webroot/boardname/noncgi/photo/

If you use the following URL...

http://YourURLhere/cgi-bin/album.pl?album=../../../..

It'll let you go all the way back to the root.....

FYI, or for just for my info, what's with this?

Ouch!

I failed to notice that one, thanks for pointing it out. It could result in users being able to see directory structures and view images from anywhere on your file system. Very bad.

At any rate, I have fixed this in 3.3, now available from http://perl.cdnarmy.ca. I was hoping to fit more into 3.3, but this has forced me to put it out a bit early.

Good eye.

Oh, I should also point out the other changes in 3.3:

• Better use of CGI package.
• The rest of the subtitles have been turned into buttons (if you have usebuttons enabled).
• Added next and previous buttons for album view.
• Sub albums now [finally] work correctly in both online and static modes.
• You can now specify an alternate config file, through the web: album.pl?configfile=/home/user/www/album.cfg. (Allows multple albums from one installation, or multiple views of the same album.)
• Added a security check into the sanity tests. (See above)
• And, as usual, random bug fixes.

Awesome Update, installing it NOW!! 8)..
Thanks Much for the new code!...

I can't take all the credit for that find, one of my users found it for me 8)...

Good thing though, it still follows the rules, and only displayed .jpg .gif & .bmp (and I added .PNG) cuz it's supported by IE and most my users use that sooo.... 8)...

Talk to ya soon 8)

Nice Work Mike. I must point out thought that I tried his security hole and it did not work here. I could only assume his whole site is world everything. I have my directories set correctly so only files you could get into was gallery but then I guess one has to know how to do that Better to write it into the program than have someone do it manually.

Well I installed the updated and same thing...

You can naviate backwards by adding the:

album=/../../

I'm Using IIS v5 on Win2k SP2, and I'm looking in to my permissions now.. But I don't think I have them set that way...

Checked permissions... No Issues there, only Default Admin Shares, nothing else.. 8(...

<FONT COLOR="#000000" SIZE="1">[ June 26, 2001 10:17 PM: Message edited by: ampere ]</font>