imagematernal
Welcome, Guest. Please login or register.
Did you miss your activation email?

 
Advanced search

22745 Posts in 6703 Topics- by 17593 Members - Latest Member: permsk

18-11-2019 08:41:12
JOOM::GALLERY::FORUMJoomGallery 3.x JUXBackend / Administration"not uploaded for security reasons!"
Pages: [1]
Print
Author Topic: "not uploaded for security reasons!"  (Read 10889 times)
0 Members and 1 Guest are viewing this topic.
sldev
Newbie
*
Offline Offline

Posts: 1


View Profile
« on: 03-11-2015 10:30:56 »

Since Joomla 3.4.4 (I think), I haven't been able to upload through batch upload. The following error message is shown when trying to upload a zip-file:
- Warning: File xxx/5-kamp.zip not uploaded for security reasons!

Could it be caused by the latest Joomla updates (http://forum.joomla.org/viewtopic.php?f=715&t=894174) and if so, any workaround or upgrade on it't way? If not, any suggestions on how to solve it?

And yes, already checked max upload size, allowed file types, admin tools and RSFirewall, etc...

Cheers,
Stefan
Logged
GJSchaller
Jr. Member
**
Offline Offline

Posts: 71


View Profile WWW
« Reply #1 on: 04-11-2015 16:32:32 »

Reporting the same issue, was about to post the same link to the Joomla forums.

It seems there was an update in Joomla, and it requires a change to how components call for uploads.
Logged

Geoffrey Schaller
Technical Officer
http://www.knightrealms.com
MrMusic
Administrator
Hero Member
*****
Offline Offline

Posts: 1084



View Profile
« Reply #2 on: 09-11-2015 14:09:45 »

Hi,

yes, it is a security feature in the actual Joomla!  Rolleyes
Can you confirm that this fix corrects the issue: https://github.com/JoomGallery/JoomGallery/issues/66
Logged

From now on there is the support for the JoomGallery here: forum.en.joomgalleryfriends.net
GJSchaller
Jr. Member
**
Offline Offline

Posts: 71


View Profile WWW
« Reply #3 on: 09-11-2015 14:26:20 »

Confirmed - the fix works.
Logged

Geoffrey Schaller
Technical Officer
http://www.knightrealms.com
Chraneco
Developer-Team
Hero Member
*****
Offline Offline

Posts: 3544


View Profile
« Reply #4 on: 27-05-2016 01:59:24 »

Hi,

we're not sure yet whether we want to lower the default security settings. It will probably depend on how often this issue is reported.

Could you please attach an example zip file which is showing this issue?

Thanks!

Regards
Chraneco
Logged
GJSchaller
Jr. Member
**
Offline Offline

Posts: 71


View Profile WWW
« Reply #5 on: 27-05-2016 02:02:41 »

I'll have to check again, it's been a while since it's been an issue.  I'll see if it's still happening in the latest release.
Logged

Geoffrey Schaller
Technical Officer
http://www.knightrealms.com
GJSchaller
Jr. Member
**
Offline Offline

Posts: 71


View Profile WWW
« Reply #6 on: 20-06-2016 23:34:23 »

This still seems to be an issue in 3.3.2 - I'm getting my hands on a ZIP that is causing the issue from one of my clients.
Logged

Geoffrey Schaller
Technical Officer
http://www.knightrealms.com
GJSchaller
Jr. Member
**
Offline Offline

Posts: 71


View Profile WWW
« Reply #7 on: 20-06-2016 23:40:12 »

The error now reads:

Error
Archive does not exist
No file has been uploaded!

A sample ZIP is at: http://www.knightrealms.com/pics/JoomGallery-NoUpload.zip
Logged

Geoffrey Schaller
Technical Officer
http://www.knightrealms.com
MrMusic
Administrator
Hero Member
*****
Offline Offline

Posts: 1084



View Profile
« Reply #8 on: 22-06-2016 16:02:25 »

There is a problem in the file 'Dr Liam.jpg'.
When i try to upload it in a zip the upload failed. When i save this file in an image editing program newly then the upload is possible. Why?  Rolleyes
Logged

From now on there is the support for the JoomGallery here: forum.en.joomgalleryfriends.net
GJSchaller
Jr. Member
**
Offline Offline

Posts: 71


View Profile WWW
« Reply #9 on: 22-06-2016 16:06:07 »

I blame Liam, since he's a general troublemaker, but that's just me...

I am not the creator of the files, but I will check and see if there is something unusual about it.
Logged

Geoffrey Schaller
Technical Officer
http://www.knightrealms.com
GJSchaller
Jr. Member
**
Offline Offline

Posts: 71


View Profile WWW
« Reply #10 on: 22-06-2016 16:31:21 »

Even after the file "Dr Liam.jpg" has been removed from the ZIP file, I get the following messages when attempting to upload the ZIP:

Warning
Warning: File /home/kradmin/public_html/administrator/components/com_joomgallery/temp/Archive-87534/Archive.zip not uploaded for security reasons!

Error
Archive does not exist
No file has been uploaded!
Logged

Geoffrey Schaller
Technical Officer
http://www.knightrealms.com
Erftralle
Sr. Member
****
Offline Offline

Posts: 346


View Profile
« Reply #11 on: 23-06-2016 00:57:41 »

Hi,

I can't confirm the problem with the file "Dr Liam.jpg". I had no problems to upload this file included as the only one in a Zip created by 7-Zip.

I do have the problem with the file "Satrys.jpg". It contains a string '.py', which is, if the file is included in an archive, considered to be unsafe by Joomla!.

Maybe we should reopen that issue on GitHub?

Regards
Erftralle

Logged
GJSchaller
Jr. Member
**
Offline Offline

Posts: 71


View Profile WWW
« Reply #12 on: 23-06-2016 01:55:06 »

I was able to get around this using the Drag & Drop, once I updated my config settings.  This is not a priority for me any more, although I won't mind if this is revisited with the files as an example.
Logged

Geoffrey Schaller
Technical Officer
http://www.knightrealms.com
MrMusic
Administrator
Hero Member
*****
Offline Offline

Posts: 1084



View Profile
« Reply #13 on: 23-06-2016 12:36:40 »

I can't confirm the problem with the file "Dr Liam.jpg". I had no problems to upload this file included as the only one in a Zip created by 7-Zip...
The problem only occurs when the ZIP was created with the Windows10-Explorer.  Rolleyes
Logged

From now on there is the support for the JoomGallery here: forum.en.joomgalleryfriends.net
Chraneco
Developer-Team
Hero Member
*****
Offline Offline

Posts: 3544


View Profile
« Reply #14 on: 14-08-2016 20:14:28 »

Hi,

since this problem seems to happen only occasionally and since there is a workaround by using a different zipping program we decided not to remove the security checks that are causing this for now as we don't want to loosen the security measures in Joomla. I hope you understand. We can reconsider this if more users are reporting the same problem.

Regards
Chraneco
Logged
Pages: [1]
Print
Jump to:  

HOSTED BY SCHWARZKÜNSTLER ®

PROTECTED BY  ZB BLOCK  AND Project Honey Pot
Theme orange-lt created by panic

Bad Behavior has blocked 5049 access attempts in the last 7 days.

maternal