[SOLVED] "Attempt to use ADODB from outside of CMS" after Update to 1.1.4.1

[Erich le Ghaz]

Hi,

today I made 3 Updates:

1.1 to 1.1.2
1.1.2 to 1.1.3.1
1.1.3.1 to 1.1.4.1

After the last update I now get the message "Attempt to use ADODB from outside of CMS" when I try to open the site: www.easy-breeze.de

The site is gone and admin functionality, too. I read about the problem, but thought it was fixed with 1.1.4.1.

So, what's to do now? Anyone who can help?

Thanks in advance.

Christian

[cyberman]

Please look here

http://forum.cmsmadesimple.org/index.ph ... l#msg79521

[Erich le Ghaz]

OK, thanks!

I deleted the "Attempt to use ADODB from outside of CMS" line in adodb.inc.php and now it works again. Could I run the version without that that line without problems?

Christian

[cyberman]

Hmm, I'm wondering ... normally this line was added to prevent cross site scripting.

[Erich le Ghaz]

Hi!

When I put the line back in the site is off again and the message "Attempt to use ADODB..." back.

Should I run the site without the line? Would an update to 1.2 be helpful?

Gruß
Christian

[RonnyK]

There is an issue with the diff-files to 1.2. They are already dumped. For now the way to upgrade is to use the full package.....

Ronny

[Erich le Ghaz]

OK, and after uploading 1.2 do I have to run update.php or install.php?

Christian

[RonnyK]

upgrade.php, there is no install.php 

The installer is automatically kicked if an install-dir exists an NO or an EMPTY config.php is available. That is not the case in an upgrade, so no installer will start.

Ronny

[Erich le Ghaz]

Hallo Ronny,

fine, now I see. I think probaply it's best to upgrade to 1.2. But after all the problems tonight I'm a bit afraid of it.

Ronny, thanks for your quick and good help! That's great.

Christian

[Dr.CSS]

Well I hope taking out that line won't make my site vulnerable as I upgraded from 1.1.1 to 1.2, using the full install not diff. files, and had to take it out to get it working...

[tsw]

yes it will, adodb lite has a problem with script injectation through eval...

and as there is no updated adodb available we patched it so that it can only be called from cmsms...

[Dr.CSS]

Cool, I reuploaded the adodb.inc.php and I don't get the error now...

[tsw]

probably a broken upload for the first time..

[Erich le Ghaz]

I made an upgrade to 1.2 and there is no problem anymore.