jDownloads Support Forum

Older Versions => jDownloads 3.2 (Support ended) => General => Topic started by: oakarts on 25.08.2015 21:50:35

Title: JPath::check Snooping out of bounds
Post by: oakarts on 25.08.2015 21:50:35
I am getting an error when using the file upload function wizard.  If I do an individual new download it works but if I try and use the multi-upload function I get the following error.  As far as I can tell the issue is related to path specification.

[UploadComplete]
[StateChanged] STOPPED
[FileUploaded] File: id=o_19tj4tjbv1svljbnn5dv0j1ogmb, name=01DX3027-L.jpg, type=image/jpeg, size=31438, origSize=31438, loaded=31438, percent=100, status=DONE, lastModifiedDate=Sun Aug 23 2015 18:43:10 GMT-0700 (PDT) Info: response=
20 - An error has occurred.
JPath::check Snooping out of bounds @ /home/users/web/b2306/xxxxxxxx/jm256/jdownloads/
Return to Control Panel
, status=200, responseHeaders=
[UploadProgress] File: id=o_19tj4tjbv1svljbnn5dv0j1ogmb, name=01DX3027-L.jpg, type=image/jpeg, size=31438, origSize=31438, loaded=31438, percent=100, status=UPLOADING, lastModifiedDate=Sun Aug 23 2015 18:43:10 GMT-0700 (PDT) Total: size=31438, loaded=31438, uploaded=0, failed=0, queued=1, percent=100, bytesPerSec=17398
[UploadProgress] File: id=o_19tj4tjbv1svljbnn5dv0j1ogmb, name=01DX3027-L.jpg, type=image/jpeg, size=31438, origSize=31438, loaded=31438, percent=100, status=UPLOADING, lastModifiedDate=Sun Aug 23 2015 18:43:10 GMT-0700 (PDT) Total: size=31438, loaded=31438, uploaded=0, failed=0, queued=1, percent=100, bytesPerSec=17476
[UploadFile] id=o_19tj4tjbv1svljbnn5dv0j1ogmb, name=01DX3027-L.jpg, type=image/jpeg, size=31438, origSize=31438, loaded=0, percent=0, status=UPLOADING, lastModifiedDate=Sun Aug 23 2015 18:43:10 GMT-0700 (PDT)
[BeforeUpload] File: id=o_19tj4tjbv1svljbnn5dv0j1ogmb, name=01DX3027-L.jpg, type=image/jpeg, size=31438, origSize=31438, loaded=0, percent=0, status=QUEUED, lastModifiedDate=Sun Aug 23 2015 18:43:10 GMT-0700 (PDT)
[StateChanged] STARTED
File: id=o_19tj4tjbv1svljbnn5dv0j1ogmb, name=01DX3027-L.jpg, type=image/jpeg, size=31438, origSize=31438, loaded=0, percent=0, status=QUEUED, lastModifiedDate=Sun Aug 23 2015 18:43:10 GMT-0700 (PDT)
[FilesAdded]
[Refresh]
[QueueChanged]
[FileFiltered] File: id=o_19tj4tjbv1svljbnn5dv0j1ogmb, name=01DX3027-L.jpg, type=image/jpeg, size=31438, origSize=31438, loaded=0, percent=0, status=QUEUED, lastModifiedDate=Sun Aug 23 2015 18:43:10 GMT-0700 (PDT)
[Browse]
[PostInit]
[Init] Info: runtime=html4 Features: chunks=false, multipart=true, multi_selection=false
Title: Re: JPath::check Snooping out of bounds
Post by: ColinM on 26.08.2015 22:12:01
Hi
First I have changed your message above by inserting an 'xxxxxx' string over your site name in the error message as a precaution

But I did look at you site and I could see you have many downloads.
When you say the the
Quotefile upload function wizard
do you mean the automatic monitoring from the backend admin?  The front end upload only handles one file at a time.

If you are using the monitoring did you have automatic monitoring on?

How did you upload the files?
Also just for completenes which version of jD are you using?

Colin
Title: Re: JPath::check Snooping out of bounds
Post by: oakarts on 26.08.2015 22:26:02
Thank you - I am using JDownload 3.2.35 for the component itself.  A variety of versions of the plugins (not sure if these are on the absolute latest ones.)  I am using the plupload.com screen where you drag files or click the add files button.  Not the auto monitoring of a directory.  Does this make sense?  Thank you.  I posted two images outlining the versions I am using and the screen I am referring to.

[gelöscht durch Administrator]
Title: Re: JPath::check Snooping out of bounds
Post by: ColinM on 26.08.2015 23:01:00
Hi
If you upload several files one at a time do you see the files ok?

In doing multiple files is it the second one that has a problem?

Do you have Caching enabled?

I presume it is not just one particular file! Is that correct?

Can you upload files one at a time without having to reload the plupload screen?

Sorry for all the question but I am trying to get ahandle on this as my demo site works AOK

Colin
Title: Re: JPath::check Snooping out of bounds
Post by: oakarts on 26.08.2015 23:20:49
Not a problem - I APPRECIATE your willingness to help.  One bit I should clarify - when I click "Start Upload" it seems to go through the motions even getting a 100% status of being uploaded but when I go back to 'refresh' that screen where it shows the files without a corresponding download entries there are no files showing.  The only reason I found out the snooping message was when I turned on the upload error display.

If you upload several files one at a time do you see the files ok?

       No - all go through the status bar of uploading but coming back to the screen to then create downloads - there are no files listed.

In doing multiple files is it the second one that has a problem?
        No files work - individual or multiple

Do you have Caching enabled?
         No

I presume it is not just one particular file! Is that correct?
    Correct it is any files of differing formats (have tried pdfs, and jpgs.

Can you upload files one at a time without having to reload the plupload screen?
    No

Sorry for all the question but I am trying to get ahandle on this as my demo site works AOK

Again I appreciate it.
Title: Re: JPath::check Snooping out of bounds
Post by: ColinM on 27.08.2015 22:35:58
Hi
Are you able to ftp a file to the location?  I am wondering if there is a file permission problem.

Have you changed the file location from the standard one jD normally uses?

This is puzzling!

Colin
Title: Re: JPath::check Snooping out of bounds
Post by: oakarts on 27.08.2015 23:10:57
I am able to ftp to that spot and the file shows up in the unassigned downloads (if I enable the auto monitoring).  At this point I am just using the default settings for the folder - ~/jdownloads/
Title: Re: JPath::check Snooping out of bounds
Post by: oakarts on 31.08.2015 19:54:24
In case it enlightens the situation I can upload also using the JCE editor for attachments/images when updating articles.

Quote from: ColinM on 27.08.2015 22:35:58
Hi
Are you able to ftp a file to the location?  I am wondering if there is a file permission problem.

Have you changed the file location from the standard one jD normally uses?

This is puzzling!

Colin
Title: Re: JPath::check Snooping out of bounds
Post by: Arno on 01.09.2015 15:48:44
Hi.
Maybe i understand something wrong.
- you upload many files in a single step to the jDownloads root folder?
- afterwards the files are not listed in the jD 'Files' list ?
- you can not find this files in  this jDownloads root folder (when you check it via FTP)?
Title: Re: JPath::check Snooping out of bounds
Post by: oakarts on 01.09.2015 17:59:16
All three are correct.  If I use other methods outside of JDownloads I can upload files (Directly via FTP and the JCE Editor).  I also tried uploading one single file in the upload files screen it does not work.
Title: Re: JPath::check Snooping out of bounds
Post by: oakarts on 22.09.2015 00:09:10
Quote from: oakarts on 01.09.2015 17:59:16
All three are correct.  If I use other methods outside of JDownloads I can upload files (Directly via FTP and the JCE Editor).  I also tried uploading one single file in the upload files screen it does not work.

Just as an update to this thread.  I am still unable to upload using that 'upload screen'.  One thing has changed since my original posting - now the upload is listed as having an error as opposed to successful. So ti is more accurate in the upload status but still not loading files into the 'unpublished' downloads.
Title: Re: JPath::check Snooping out of bounds
Post by: ColinM on 22.09.2015 12:06:11
Hi
This is puzzling!
Another thought, which is probably not the case as JCE is probably subject to same restraints and you are able to create new Downloads but just to clear it.
 
Are the files large?   
An upload will fail if you do not have upload_max_filesize and post_max_size set high enough.  I usually set them to around 20M with post_max_size a bit larger as it uses buffering, for example
upload_max_filesize=20M
post_max_size=25M

These are set in php.ini usually but it is host dependent.

The difference between plupload and creating a new Download is the target directory, which may be significant.  Could you try as a test setting the directory permissions 'wide open' but obviously do not leave them that way!

Colin

Colin
Title: Re: JPath::check Snooping out of bounds
Post by: oakarts on 22.09.2015 18:42:39
Here are the specifications from the php.ini

Allowed file uploads:   Yes
Maximum allowed file size (max_filesize):   20M
Maximum allowed POST size: (post_max_size):   20M
Memory limit (memory_limit):   128M
Maximum input time for uploads (max_input_time) in seconds:   60
Maximum execution time of scripts (max_execution_time) in seconds:   120

The latest file I used was 4kb.

I tried switching to the tmp directory and while it auto-listed all the temp files in that directory - I still was unable to use the plupload function.  I am not sure how I would use the jce editor to test it since I only see a link function.  I am open to the idea of giving you temp access to the admin side to explore any other pieces I am missing.

My email is postmaster  AT  oakarts.org.
Title: Re: JPath::check Snooping out of bounds
Post by: ColinM on 23.09.2015 13:14:21
Hi
The easiest way to send confidential details is to use the Forum Private Message (PM) service.  I have just sent you a PM so that you can reply. Just clicking on the PM symbol below the users picture will also initiate a PM

Colin
Title: Re: JPath::check Snooping out of bounds
Post by: ColinM on 23.09.2015 23:17:54
Hi
I have tried plupload with both isis and hathor templates.  In both situations when uploading I got an error message telling me there was an HTTP error but it did not give error code!!
(Using Firefox browser).  Also tried on my XAMPP test site with php 5.5.11 but that was ok.

Will check further
Colin
PS nothing to do with current challenge but I noticed you are using MySQL, you might find MySQLi is better, and faster.
C
Title: Re: JPath::check Snooping out of bounds
Post by: ColinM on 24.09.2015 00:09:35
Hi
I switched on the log - it showed a mess in hathor so switched to isis.  Confirmed as in your first post.  This showed the http: error code as 200  but this is the normal one for success.

Have you checked out that you are running foul of some anti - student protection as you are in a sub domain?

Also could you load a files manager such as the free version of ProFiles please.

Colin
Title: Re: JPath::check Snooping out of bounds
Post by: oakarts on 24.09.2015 00:59:46
Thank you for the update.  I will leave the access up until you are done.
Title: Re: JPath::check Snooping out of bounds
Post by: Arno on 27.09.2015 22:10:22
Hi,
- nobody else has posted problems like yours.
- so it seems for me that your problem has to do with your (maybe special) server settings.
- it can be much work to find in your case the solution
So why will you not use the way directly via FTP and the auto monitoring?
Title: Re: JPath::check Snooping out of bounds
Post by: oakarts on 28.09.2015 17:12:55
Thank you for looking into it.  I think the main issue was that it only started after a recent update to JDownloads (3.2.25?), I leave FTP off as a general rule because it seems more risky so I would have to turn that on as well, other modules/plugins don't get this error when uploading to the same directory, and it was a REALLY nice feature.  Oh well if there are no other suggestions I guess I can make due.  Do you have any suggestions for the host?

Thanks.  I will go ahead and disable to secondary superadmin account then.