+- ZenphotoCMS Forum (https://forum.zenphoto.org)
+-- Forum: Support (https://forum.zenphoto.org/forum-1.html)
+--- Forum: General support (https://forum.zenphoto.org/forum-4.html)
+--- Thread: Malicious comment posting crashed my gallery (/thread-6439.html)
Malicious comment posting crashed my gallery - richrockwell - 2010-01-15
I got an email that someone posted a comment to my gallery, and when I go to log in to look at the comment, it doesn't accept my password, and when I try to go to the gallery, I get a "web page cannot be found" error. The photos are there, but I can't get to them. The posting came from dempsterpl - dempsterplour@rutgers.edu, website: http://thesaurus.reference.com. The comment is partially annual store end page expected forcings serious individual release led http://www.tomshardware.com Has anyone else experienced this, and have any tips for how to repair it?
Malicious comment posting crashed my gallery - sbillard - 2010-01-15
delete the comment from your database. Then add some spam filtering of some kind.
Malicious comment posting crashed my gallery - richrockwell - 2010-01-16
I deleted the admin table and re-ran setup to set a new password. I deleted the comment, but the comment page displays the message "extract()[function extract]" first argument should be an array in [my directory]/zenphoto/zp-core/admin-comments.php on line 119". I can see the gallery from the admin tool, but the photos don't show on the web site. I still get a "page cannot be found" error.
Malicious comment posting crashed my gallery - acrylian - 2010-01-16
You might need to check or renew your installation, maybe that comment did hack the site..
Malicious comment posting crashed my gallery - sbillard - 2010-01-16
You should also run the database refresh fuction to clean up any dangling references to the comments
Malicious comment posting crashed my gallery - richrockwell - 2010-01-20
ISSUE RESOLVED: I reinstalled and updated to version 1.2.8, and refreshed the database, and that got the gallery back up, but I was getting the an error message "call to undefined function getImageEXIFData() in ...\themes\default\image.php" on every page where the comment section would be. When I did a web search, I discovered several other ZenPhoto sites with the same error, and I discovered that the function had been renamed to getImageMetaData(). I changed "getImageEXIFData()" to "getImageMetaData()" in my image.php file, and that solved the problem, so everything is back to normal. My mistake was that I used my old version of image.php when I updated to 1.2.8 because I had customized the theme.
Malicious comment posting crashed my gallery - acrylian - 2010-01-20
The old function is still in the deprecated functions plugin but that is naturally not enabled by default.