CMS Made Simple Forums

Posted: **Wed Feb 17, 2016 3:42 am**

After upgrading tot CMSMS 2(.1.2) my rotating background image is gone.
I not only upgraded from 1.12 to 2.1.2 but I also upgraded from PHP 5.5 to PHP 5.6 - I wonder if any of these changes now prohibits my rotating background image.

For the background image of div #linkerkolom I use the script as described in a 2003 article on A List Apart: http://alistapart.com/article/randomizer
I renamed the php file to random_view.php.

My css is

Code: Select all

#linkerkolom {
	background: url([[root_url]]/uploads/images/randomlinks/random_view.php);
	position: absolute;
	etc.

I checked this css by replacing random_view.php by the name of an actual image in that directory, which then worked fine.

My php code is in the attachment.

Frank

Posted: **Wed Feb 17, 2016 8:52 am**

That code is 13 years old... I think that is your answer

Better look into jQuery sliders now!

Posted: **Fri Feb 19, 2016 4:50 am**

Yes, it's 13 years old, but I'm wondering if there maybe is just one line in it that's no longer valid since I changed from PHP5.5 to 5.6.
I understand there are modern techniques like jQuery, but I'd think this actually is a quite simple script that can hardly be outdated, except for syntax ...
Changing one line seems to be far more easier than including a new script.

Frank

Posted: **Fri Feb 19, 2016 7:39 am**

Check the error logs. They will show if a command is no longer valid.

Posted: **Fri Feb 19, 2016 8:26 am**

Only line in error log says:

Code: Select all

[Fri Feb 19 09:12:23 2016] [error] [client ...] client denied by server configuration: .../httpdocs/cmsms2/uploads/images/randomlinks/random_view.php, referer: .../tmp/cache

I don't understand this.
I 'll have a look at another solution.

Frank

Posted: **Fri Feb 19, 2016 9:57 am**

Check your .htaccess rules, you might have blocked where php files can be executed.

Posted: **Fri Feb 19, 2016 12:33 pm**

Structure of directories and files is as follows:

Code: Select all

/httpdocs/
     .htaccess
     cmsms2/
          .htaccess
          the complete cmsms installation

The first .htaccess file:

Code: Select all

RewriteEngine On
RewriteBase /cmsms2/
RewriteCond %{REQUEST_URI} !^/cmsms2.*$
RewriteRule ^(.*)$ /cmsms2/$1 [L]
RewriteRule . index.php [L]

AddHandler x-httpd-php56 .php

and the second .htaccess file in directory /cmsms2/:

Code: Select all

AddHandler x-httpd-php56 .php
php_value session.cookie_httponly true

<IfModule mod_rewrite.c>
RewriteEngine on
RewriteBase /cmsms2

RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.+)$ index.php?page=$1 [QSA]
</IfModule>

<IfModule mod_header.c>
# Disable ETags
Header unset ETag
FileEtag None
# For Security
Header set X-Frame-Options "SAMEORIGIN"
</IfModule>

<IfModule mod_deflate.c>
# Compress css, plaintext, xml, gif, and images in transport.
AddOutputFilterByType DEFLATE text/css text/plain text/xml image/gif image/jpeg image/png
</IfModule>

<IfModule mod_expires.c>
<FilesMatch "\.(ico|pdf|flv|jpg|jpeg|png|gif|js|css|swf)$">
# Set expires tags on various files... so that the browser wont attempt to reload them.
ExpiresActive On
ExpiresDefault "access plus 1 year"
<IfModule mod_header.c>
  # Setting cache control to public allowes proxy servers to cache the items too.
  Header set Cache-Control "public"
</IfModule>
</FilesMatch>
</IfModule>

There may be old stuff in there, since I started this site years ago.

Posted: **Fri Feb 19, 2016 4:08 pm**

Please check htaccess inside /uploads and /uploads/images.

As default it's not allowed to run php scripts from these places.

Maybe you should better place your script inside a user defined tag.

Posted: **Fri Feb 19, 2016 5:10 pm**

I would also talk to your hosting company, they may be able to tell you what else has change to restrict the execution of that script.

Maybe you should better place your script inside a user defined tag.

The problem with using an UDT is the result is cached if it is put directly in the stylesheet.

You could put it in a UDT then create a page that only contains that UDT and call that page from the stylesheet with the ?showtemplate=false param.

Posted: **Fri Feb 19, 2016 6:37 pm**

Jeff wrote: The problem with using an UDT is the result is cached if it is put directly in the stylesheet.

If it's stylesheet related this css part should be created by udt completely so caching could be deactivated (param nocache).

Posted: **Sat Feb 20, 2016 2:34 pm**

try renaming .htaccess file in /tmp/ folder

Posted: **Sun Feb 21, 2016 8:40 am**

@chandra:

Please check htaccess inside /uploads and /uploads/images.
As default it's not allowed to run php scripts from these places.
Maybe you should better place your script inside a user defined tag.

This definitely causes the problem, .htaccess here is:

Code: Select all

# To deny PHPs
<Files ~ "\.(php|php3|php4|php5|phtml|pl|cgi)$">
  order deny,allow
  deny from all
</Files>

When I remove this code the script works fine again.
Now, is it wise to remove this script?

@rolf:

try renaming .htaccess file in /tmp/ folder

There is no .htaccess there. But I solved the problem as described above.

Posted: **Sun Feb 21, 2016 4:01 pm**

frankmanl wrote: Now, is it wise to remove this script?

A big YES

!

/uploads folder is an exclusive place for media files inside CMSMS (images, video, pdf and so on) but NOT for scripts which needs to execute.

It's your choice to place it in root folder or maybe /libs

Posted: **Mon Feb 22, 2016 2:44 pm**

Thanks to all of you for your help.
I solved it as follows:

Code: Select all

# To deny PHPs
<Files ~ "\.(php|php3|php4|php5|phtml|pl|cgi)$">
  order deny,allow
  deny from all
</Files>

# but to allow random_view.php
<Files ~ "random_view\.php$">
  allow from all
</Files>

In this way all php files/scripts are prohibited, except for the one I need.

Frank

CMS Made Simple Forums

[SOLVED] rotating background image stops working

[SOLVED] rotating background image stops working

Re: rotating background image stopped working

Re: rotating background image stopped working

Re: rotating background image stopped working

Re: rotating background image stopped working

Re: [CLOSED not solved] rotating background image stops work

Re: [CLOSED not solved] rotating background image stops work

Re: rotating background image stops working

Re: rotating background image stops working

Re: rotating background image stops working

Re: rotating background image stops working

Re: rotating background image stops working

Re: rotating background image stops working

Re: rotating background image stops working