Security warning at Image upload

CeBra · November 14th, 2006, 05:03 AM

Hi
when uploading images I do get the following message:

"Warnung: exec() has been disabled for security reasons in /photopost/image-inc.php (line74)"

I tried both GD2 and ImageMagick without any effects. Any idea what might cause this warning? Images are uploaded in Thumbs build without problems, but the warning is irretating my users

Thanks

Chuck S · November 14th, 2006, 08:27 AM

Your host has exec locked down. You must use GD2 and in global options in admin clear out the path to jpegtran and jhead

CeBra · November 15th, 2006, 04:53 PM

Done - but the problem still exists

Chuck S · November 16th, 2006, 01:11 AM

This is a server error and you must use GD2 and clear the jpegtran and jhead paths in global options

You will get this issue until you do that cause your trying to use the exec function your host has locked down

CeBra · November 16th, 2006, 04:04 AM

Not sure if you got me wrong: I *did* clear out these two lines and I *have* GD2 selected. But still this error appears.

Anything else I can do?

Chuck S · November 16th, 2006, 08:26 AM

Code:

Content visible to verified customers only.

It is virtually impossible here that you have done so sorry. fs_exec is only used with jhead, jpegtran or mogrify(imagemagick) thus which one in Admin => Global Options are you still using?

CeBra · November 16th, 2006, 08:34 AM

weird :-( Attached you find a screenshot of my admin globals. Which file is this screen writing to ?

Chuck S · November 16th, 2006, 08:38 AM

You can post a url and a test user login here none admin for me to upload

CeBra · November 16th, 2006, 08:41 AM

yep

user: Chuck
PW: photopost

URL:
http://www.fotocampus.info/photopost/index.php

you may be redirected to the forum page. In that case click "Bilder-Forum" in the horizontal nav bar.

Chuck S · November 16th, 2006, 12:19 PM

http://www.fotocampus.info/photopost....php?photo=154

Possibly by change do you have extract exif turned on? You are absolutely sure your using GD2 as fs_exec is never called which is why I am stumped

CeBra · November 16th, 2006, 12:44 PM

well... how can I make this absolutely sure? I will cross-check with my hosting provider.

edited: OK, they say they support ImageMagick, GDLib or NetPBM

exif extraction is turned on. Shall I switch it off?

Chuck S · November 16th, 2006, 01:02 PM

yes turn exif off

CeBra · November 16th, 2006, 01:07 PM

HA- that'S it. No more warnings.

If you have time, would you mind to explain *why* this was the reason for the error?

Thanks for your patience. Much appreciated.