Item iframes: permissions problem

AndySuk

Joined: 2014-01-14
Posts: 4

Posted: Tue, 2014-01-14 18:15

Hi Folks

I have an error on the final step of embedding a YouTube video. Following Floridave's instructions the module has been happily installed and activated. I've uploaded a couple of photo's and then inserted the 'embed code' from YouTube. At this point what I have in the browser address bar (I've tried IE10 and Chrome) is...

Quote:

http://www.crystallis.co.uk/gallery3/index.php/admin/item_iframe?item_id=382

When I, however, go to Commit the Changes I get an error 403 from the server saying "Forbidden" and that I don't have permission to access this document. At this point the browser address bar shows...

Quote:

http://www.crystallis.co.uk/gallery3/index.php/admin/item_iframe/save?item_id=382

I've checked that the permissions are correct in the album (although I'm signed in as Admin) just to be sure. On the server the folders (albums) have 0755 permissions set and the files have 0644.

I did consider using the 'embed videos' module as an alternative but there's a direction on the php setup on the server that suggests that you shouldn't activate 'allow_url_fopen' unless absolutely necessary so I was hoping someone might be able to tell me what I'm doing wrong especially as everything seems to work ok up until the last step.

Many thanks

Andy

floridave

Joined: 2003-12-22
Posts: 27300

Posted: Tue, 2014-01-14 21:44

Does that item exist or are guest permissions not set to view the item/fullsized?
What code are you using?

Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team

AndySuk

Joined: 2014-01-14
Posts: 4

Posted: Wed, 2014-01-15 17:14

Hi Dave

It doesn't exist anymore; whilst I was testing I've done some deletions so the database goes from item 373-388 now! Guest permissions are set to view everything fullsize.

The embed code is...

Quote:

<iframe width="640" height="360" src="//www.youtube.com/embed/R0cd6dd3gGg?feature=player_detailpage" frameborder="0" allowfullscreen></iframe>

I've done the same with another image and attached the screenshots. The last one shows the server setup in case it helps.

Thanks again.

Andy

floridave

Joined: 2003-12-22
Posts: 27300

Posted: Thu, 2014-01-16 03:49

Not sure why as it works for me.
Anyway lets see why the save function fails for you.
Edit controllers/admin_itme_iframe.php
find

  public function save() {
    access::verify_csrf();

and remove

    access::verify_csrf();

test again and report back.

Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team

AndySuk

Joined: 2014-01-14
Posts: 4

Posted: Thu, 2014-01-16 22:36

Hi Dave

I amended the php file as instructed. The result was exactly the same.

I had a scout around but there's no error logs relating to the database or relevant errors within /var/logs .

Don't fret too much; it's not a show-stopper but I'm happy to follow it through if you are!

Thanks

A

floridave

Joined: 2003-12-22
Posts: 27300

Posted: Fri, 2014-01-17 00:38

It might be this line:
ORM::factory("item_iframe")->where("item_id", "=", $item_id)->find();
perhaps the installer did not create the table. Can you look at your DB and see if the item_iframes table exists. Yes with an s at the end. (Kohana and ORM calls add the s)

Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team

AndySuk

Joined: 2014-01-14
Posts: 4

Posted: Wed, 2014-01-29 21:05

Hi Dave. Sorry for the delay in replying which was quite unintentional.

item_iframes (with an s!)is definitely there (SS1 attached).

When you mentioned Kohana something jogged my memory as I'd been meaning to ask elsewhere on the board but it may well be relevant. During the installation (of Gallery, NOT of your module) I remember some confusion over the location of the "var" directory as I have two of them; one under the /gallery3 folder and another under the /httpdocs folder (effectively the starting address for the web-available documents as I understand it). All my albums reside under /gallery3/var/albums/ (SS2) however the latest log from running the Gallery Maintenance tasks repeatedly refers to errors and that it's looking for "/var/www/vhosts..." . This directory (SS3) was, I had thought, just historical from when there were some server upgrades a few years ago. I think that the instruction from the hosting company was "ignore it but don't delete it!".

If this is the case this may well be a problem of my own creation (many grovelling apologies!) and I can easily re-create the albums and point the Advanced Settings to the correct path.

I won't, however, do anything until you've seen this; it hasn't caused any other problems that I was aware of however, as you mentioned Kohana I just wondered if these two things may be related.

Thanks again

Andy

AndySuk Joined: 2014-01-14 Posts: 4	Posted: Tue, 2014-01-14 18:15
	Hi Folks I have an error on the final step of embedding a YouTube video. Following Floridave's instructions the module has been happily installed and activated. I've uploaded a couple of photo's and then inserted the 'embed code' from YouTube. At this point what I have in the browser address bar (I've tried IE10 and Chrome) is... Quote: http://www.crystallis.co.uk/gallery3/index.php/admin/item_iframe?item_id=382 When I, however, go to Commit the Changes I get an error 403 from the server saying "Forbidden" and that I don't have permission to access this document. At this point the browser address bar shows... Quote: http://www.crystallis.co.uk/gallery3/index.php/admin/item_iframe/save?item_id=382 I've checked that the permissions are correct in the album (although I'm signed in as Admin) just to be sure. On the server the folders (albums) have 0755 permissions set and the files have 0644. I did consider using the 'embed videos' module as an alternative but there's a direction on the php setup on the server that suggests that you shouldn't activate 'allow_url_fopen' unless absolutely necessary so I was hoping someone might be able to tell me what I'm doing wrong especially as everything seems to work ok up until the last step. Many thanks Andy
	XUser login Username: * Password: * Create new account Request new password
floridave Joined: 2003-12-22 Posts: 27300	Posted: Tue, 2014-01-14 21:44
	Does that item exist or are guest permissions not set to view the item/fullsized? What code are you using? Dave _____________________________________________ Blog & G2 \|\| floridave - Gallery Team

AndySuk Joined: 2014-01-14 Posts: 4	Posted: Wed, 2014-01-15 17:14
	Hi Dave It doesn't exist anymore; whilst I was testing I've done some deletions so the database goes from item 373-388 now! Guest permissions are set to view everything fullsize. The embed code is... Quote: <iframe width="640" height="360" src="//www.youtube.com/embed/R0cd6dd3gGg?feature=player_detailpage" frameborder="0" allowfullscreen></iframe> I've done the same with another image and attached the screenshots. The last one shows the server setup in case it helps. Thanks again. Andy

floridave Joined: 2003-12-22 Posts: 27300	Posted: Thu, 2014-01-16 03:49
	Not sure why as it works for me. Anyway lets see why the save function fails for you. Edit controllers/admin_itme_iframe.php find public function save() { access::verify_csrf(); and remove access::verify_csrf(); test again and report back. Dave _____________________________________________ Blog & G2 \|\| floridave - Gallery Team

AndySuk Joined: 2014-01-14 Posts: 4	Posted: Thu, 2014-01-16 22:36
	Hi Dave I amended the php file as instructed. The result was exactly the same. I had a scout around but there's no error logs relating to the database or relevant errors within /var/logs . Don't fret too much; it's not a show-stopper but I'm happy to follow it through if you are! Thanks A

floridave Joined: 2003-12-22 Posts: 27300	Posted: Fri, 2014-01-17 00:38
	It might be this line: `ORM::factory("item_iframe")->where("item_id", "=", $item_id)->find();` perhaps the installer did not create the table. Can you look at your DB and see if the item_iframes table exists. Yes with an s at the end. (Kohana and ORM calls add the s) Dave _____________________________________________ Blog & G2 \|\| floridave - Gallery Team

AndySuk Joined: 2014-01-14 Posts: 4	Posted: Wed, 2014-01-29 21:05
	Hi Dave. Sorry for the delay in replying which was quite unintentional. item_iframes (with an s!)is definitely there (SS1 attached). When you mentioned Kohana something jogged my memory as I'd been meaning to ask elsewhere on the board but it may well be relevant. During the installation (of Gallery, NOT of your module) I remember some confusion over the location of the "var" directory as I have two of them; one under the /gallery3 folder and another under the /httpdocs folder (effectively the starting address for the web-available documents as I understand it). All my albums reside under /gallery3/var/albums/ (SS2) however the latest log from running the Gallery Maintenance tasks repeatedly refers to errors and that it's looking for "/var/www/vhosts..." . This directory (SS3) was, I had thought, just historical from when there were some server upgrades a few years ago. I think that the instruction from the hosting company was "ignore it but don't delete it!". If this is the case this may well be a problem of my own creation (many grovelling apologies!) and I can easily re-create the albums and point the Advanced Settings to the correct path. I won't, however, do anything until you've seen this; it hasn't caused any other problems that I was aware of however, as you mentioned Kohana I just wondered if these two things may be related. Thanks again Andy

Item iframes: permissions problem

XUser login