[MOD] Hidden / Password protected categories v1.1 (2009-06-30)

[tutoko]

files attached.
Also I just finished doing a complete clean install with default template and then went through the mod one more time with the clean files. Same outcome.
When entering the password I get redirected to the Host 404 page - not the "incorrect password" message as shown on your demo site.

Thanks very much for your assistance V@no.

[V@no]

If you do access to server's error logs and php error logs, look if you see anything related to this.
If nothing there, I'd like to try it myself if it's possible (you can PM me if you don't want publish it)

[tutoko]

hi V@no,
I am not sure what you want me to send you.
the site address is http://harmony-radio.com/Harmony-Paints/

If you need access to the server system please let me know by email =>  vline44yahoo.com.au   and I can provide you codes etc for getting into look at the server system.

19.10.2012 - Update, Hi V@no, I found this on the host server FAQ's - does this relate to the issue I have ? :
---------------
PHP register_globals feature is set to OFF on our servers for security reasons. All modern scripts, these days do not use register_globals, and if you get any errors related to register_globals being disabled, you may want to check your coding or contact script developer for more details.

However, it is possible to enable register_globals by entering this line to your .htaccess file:

php_flag register_globals on

We do not recommend enabling this function as it may lead to possible security problems for your website.
--------------------

[V@no]

Sorry for the delay. Can you setup a test password protected category so I can test it out?

Thanks.

P.S.
register globals is not an issue here.

[tutoko]

done: category is password... password is password.
Cheers V@no...

[V@no]

It seems 4images incorrectly identifies the script filename ($PHP_SELF)

I'd need access to phpinfo() to investigate

[tutoko]

PM sent with info, please let me know if you did not receive it..
Notices from inspecting the PhpInfo that php include is set to off, guess thats why the code below does not work too?

  <?php
 include("http://harmony-radio.com/Harmony-Paints/random.php");
?>


thanks once again..

[V@no]

No, it's not it. You cannot include remote .php files, simply because when your server requests for a .php file it receives whatever that php script generates, not it's source.

[V@no]

Found it.

In includes/catpass.php find:

Code: [Select]

if (!function_exists("get_self"))
{
  function get_self()
  {
    $list = get_included_files();
    return $list[0];
  }
}
if (!function_exists("get_self_full"))
{
  function get_self_full()
  {
    global $HTTP_GET_VARS;
    $q = $HTTP_GET_VARS;
    $query = array();
    foreach($q as $key => $val)
    {
      $query[] = $key . "=" . $val;
    }
    return ROOT_PATH.basename(get_self()).(!empty($query) ? "?".implode("&", $query) : "");
  }
}

Replace it with:

Code: [Select]

if (!function_exists("get_self"))
{
  function get_self()
  {
global $self_url;
return $self_url;
  }
}
if (!function_exists("get_self_full"))
{
  function get_self_full()
  {
    global $script_url;
    return $script_url."/".get_self();
  }
}


[tutoko]

Perfect V@no,

THANK YOU !
I Truely appreciate your time and efforts to get this resolved. Much appreciated.

The phpInfo you looked at - does it prevent the use of the external file loading the random image by use of:

  <?php
 include("http://harmony-radio.com/Harmony-Paints/random2.php");
?>

That just doesnt work for me in an external html page calling to the php file ?

if it is the php configuration is that something I have to get the server host to change?

[V@no]

This is offtopic, but as I tried to explain earlier it's not your server's configuration. include() function uses to execute PHP code from a different file. When you access any .php files via remote address (http://) it executes that .php file on that remote server, so when your server tries include that .php file it gets the generated by that file output, which is usually HTML code, not PHP source code of that file.
Now, if you'd rename random2.php to random2.txt, then it might work, because remote server would simply output text inside that file, not execute it.

[tutoko]

thank you for that explaination V@no, will try your suggestion. Sorry for the off topic query, but again I really appreciate your input. The mods and the extensive assistance you have provided on this forum regarding 4images is invaluable. Many many thanks.

[Vizear]

Hey, just a quick question. Is there a way for the search to find a hidden category? Eg: searching a keyword on the hidden image...

Thank you.