Gallery 1.4.4-pl5 Security Release

Submitted by ckdake on Wed, 2005-01-26 12:14

Several days ago, Rafel Ivgi informed us of a possible cross site scripting (definition) problem in current versions of Gallery. The problem and some similar problems discovered by our team has been addressed in Gallery 2 CVS as well as in this release of 1.4.4-pl5.

As with most other cross site scripting problems, No risk is posed to the webserver itself or any non-Gallery data, but a Gallery install could be compromised using appropriate code.

In addition to the security fix, Gallery 1.4.4-pl5 uses the proper parameters for new versions of ImageMagick and fixes some small issues with PHP 5.

All Gallery users are strongly urged to upgrade to 1.4.4-pl5 immediately, which fixes this problem and will secure your system.

Gallery 1.4.4-pl5 can be downloaded from the Gallery Download Page.

Submitted by jifl on Wed, 2005-01-26 12:41.

Is there a 1.4.4-pl4 -> 1.4.4-pl5 patchfile ?

Submitted by schultmc on Wed, 2005-01-26 14:57.

Version 1.4.4-pl5-1 of the Debian gallery package was uploaded on Wednesday, January 26, 2005 and should be available in Debian unstable after the archive run completes in the afternoon (EST) of Wednesday, January 26, 2005.

Submitted by ayn on Wed, 2005-01-26 15:48.

I read that ImageMagick parameters were updated, so is this version going to work with older version of ImageMagick? My server runs Debian stable and it's using 5.4.4.5. thanks!

Submitted by ckdake on Wed, 2005-01-26 16:27.

Gallery now works properly with both older and newer versions of ImageMagick

Submitted by mandebooks on Wed, 2005-01-26 20:47.

hi, 
 
i just installed the new version. now when i upload pics (via the form upload or the iphoto plugin) they don't display. the verison that was avaialble January 24th worked just fine - whats up?

Submitted by shokk on Thu, 2005-01-27 01:15.

For now, use this... 
<a href="http://www.shokk.com/gallery1.4.4-pl4_1.4.4-pl5.patch">http://www.shokk.com/gallery1.4.4-pl4_1.4.4-pl5.patch</a>

Submitted by trakman on Thu, 2005-01-27 05:32.

I'm running FreeBSD and am fairly new to things. 
I've tried updating my ports collection and it can only see 'gallery-1.4.4.4'. Who can I contact to update the ports collection? Or is there another way I can install this new secuity update?

Submitted by dmd on Thu, 2005-01-27 05:51.

How do you apply this? 
 
I tried patch -p1 -i gallery1.4.4-pl4_1.4.4-pl5.patch and that didn't work... 
Hmm... Looks like a normal diff to me... 
can't find file to patch at input line 2 
Perhaps you used the wrong -p or --strip option? 
 
 
I tried a bunch of different values for -p, and I was doing this from within the Gallery directory.

Submitted by ckdake on Thu, 2005-01-27 13:33.

Please use one of our support channels to resolve this, preferably the forums avaliable in the "Support" section on the left of this website.

Submitted by plam on Thu, 2005-01-27 16:06.

You can find the diff (for a few weeks, at least) at http://plam.csail.mit.edu/~plam/tmp/gallery144-4to5.diff 
 
diff -ru gallery-1.4.4-pl4/ChangeLog gallery-1.4.4-pl5/ChangeLog 
--- gallery-1.4.4-pl4/ChangeLog 2004-11-03 14:10:47.000000000 -0500 
+++ gallery-1.4.4-pl5/ChangeLog 2005-01-25 18:05:10.000000000 -0500 
@@ -1,3 +1,22 @@ 
+2005-01-25 Chris Kelly <ckdake@users.sf.net> 1.4.4-pl5 
+ 
+ * 1.4.4-pl5 Release 
+ 
+2005-1-25 Jay Rossiter <cryptographite@users.sf.net> 1.4.4-pl5-cvs-b3 
+ 
+ * Fix: PHP5 added to setup/.htaccess 
+ 
+2005-1-24 Jay Rossiter <cryptographite@users.sf.net> 1.4.4-pl5-cvs-b2 
+ 
+ * Fix: ImageMagick 6.0 auto-detection 
+ 
+ * Fix: missing "global $gallery;" in AlbumDB could cause warning messages 
+ on PHP5 
+ 
+2005-1-24 Jay Rossiter <cryptographite@users.sf.net> 1.4.4-pl5-cvs-b1 
+ 
+ * Fix: Correct unsanitized user-input 
+ 
2004-11-03 Jay Rossiter <cryptographite@users.sf.net> 1.4.4-pl4 
 
* 1.4.4-pl4 release 
diff -ru gallery-1.4.4-pl4/classes/AlbumDB.php gallery-1.4.4-pl5/classes/AlbumDB.php 
--- gallery-1.4.4-pl4/classes/AlbumDB.php 2004-08-18 11:51:51.000000000 -0400 
+++ gallery-1.4.4-pl5/classes/AlbumDB.php 2005-01-25 01:07:17.000000000 -0500 
@@ -17,7 +17,7 @@ 
* along with this program; if not, write to the Free Software 
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. 
* 
- * $Id: AlbumDB.php,v 1.34.2.1 2004/08/18 15:51:51 cryptographite Exp $ 
+ * $Id: AlbumDB.php,v 1.34.2.2 2005/01/25 06:07:17 cryptographite Exp $ 
*/ 
?> 
<?php 
@@ -294,6 +294,8 @@ 
} 
 
function numAccessibleItems($user) { 
+ global $gallery; 
+ 
$numPhotos = $numAlbums = $numTopAlbums = 0; 
foreach ($this->albumList as $album) { 
if ($user->canReadAlbum($album)) { 
diff -ru gallery-1.4.4-pl4/do_command.php gallery-1.4.4-pl5/do_command.php 
--- gallery-1.4.4-pl4/do_command.php 2004-07-11 23:12:07.000000000 -0400 
+++ gallery-1.4.4-pl5/do_command.php 2005-01-25 01:07:15.000000000 -0500 
@@ -17,13 +17,26 @@ 
* along with this program; if not, write to the Free Software 
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. 
* 
- * $Id: do_command.php,v 1.63.2.2 2004/07/12 03:12:07 cryptographite Exp $ 
+ * $Id: do_command.php,v 1.63.2.4 2005/01/25 06:07:15 cryptographite Exp $ 
*/ 
?> 
<?php 
 
require(dirname(__FILE__) . '/init.php'); 
 
+/* 
+ * Test for relative URL, which we know to be local. If URL contains :// 
+ * assume that it's remote and test it against our local full URLs 
+ * to ensure security. Don't check for http:// or https:// because 
+ * for all we know, someone put their album URL on a gopher server... 
+ */ 
+if (isset($return) && $return[0] != '/' && strstr($return, '://') !== false) { 
+ if (strncmp($return, $gallery->app->photoAlbumURL, strlen($gallery->app->photoAlbumURL) != 0) && 
+ strncmp($return, $gallery->app->albumDirURL, strlen($gallery->app->albumDirURL) != 0)) { 
+ die(_('Attempted security breach.')); 
+ } 
+} 
+ 
if (!strcmp($cmd, "remake-thumbnail")) { 
if ($gallery->user->canWriteToAlbum($gallery->album)) { 
?> 
diff -ru gallery-1.4.4-pl4/docs/g1package/gallery1-install.faq.a.html gallery-1.4.4-pl5/docs/g1package/gallery1-install.faq.a.html 
--- gallery-1.4.4-pl4/docs/g1package/gallery1-install.faq.a.html 2004-11-03 14:32:15.000000000 -0500 
+++ gallery-1.4.4-pl5/docs/g1package/gallery1-install.faq.a.html 2005-01-26 06:44:35.000000000 -0500 
@@ -2,7 +2,7 @@ 
How can I get the latest version of Gallery? 
</a></dt><dt>A.2. <a href="gallery1-install.faq.a.html#gallery1-install.faq.a.2"> 
How can I get the latest CVS version of Gallery? 
- </a></dt></dl></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.a.1"></a><a name="id2582284"></a>A.1.</td><td align="left" valign="top"> 
+ </a></dt></dl></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.a.1"></a><a name="id2512733"></a>A.1.</td><td align="left" valign="top"> 
How can I get the latest version of Gallery? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
There are two different 'latest' versions of Gallery. There is the version 
@@ -14,7 +14,7 @@ 
more current bugfixes and neat modifications. The version in CVS is 
typically pretty stable, since the developers use it to power their own 
personal Galleries, but it is bound to have the occasional major glitch. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.a.2"></a><a name="id2582304"></a>A.2.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.a.2"></a><a name="id2513351"></a>A.2.</td><td align="left" valign="top"> 
How can I get the latest CVS version of Gallery? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
The CVS binaries are a prerequisite. You can get them from cvshome.org. 
diff -ru gallery-1.4.4-pl4/docs/g1package/gallery1-install.faq.b.html gallery-1.4.4-pl5/docs/g1package/gallery1-install.faq.b.html 
--- gallery-1.4.4-pl4/docs/g1package/gallery1-install.faq.b.html 2004-11-03 14:32:15.000000000 -0500 
+++ gallery-1.4.4-pl5/docs/g1package/gallery1-install.faq.b.html 2005-01-26 06:44:35.000000000 -0500 
@@ -10,7 +10,7 @@ 
</a></dt><dt>B.5. <a href="gallery1-install.faq.b.html#gallery1-install.faq.b.5"> 
Where can I find the unzip and zipinfo 
binaries? 
- </a></dt></dl></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.b.1"></a><a name="id2582716"></a>B.1.</td><td align="left" valign="top"> 
+ </a></dt></dl></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.b.1"></a><a name="id2513438"></a>B.1.</td><td align="left" valign="top"> 
The setup page tells me that mod_rewrite is not installed. Since mod_rewrite is 
optional, how do I configure this option? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -25,13 +25,13 @@ 
For more information on mod_rewrite check out the 
<a href="http://httpd.apache.org/docs/mod/mod_rewrite.html" target="_top">Apache 
module mod_rewrite</a> page. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.b.2"></a><a name="id2582884"></a>B.2.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.b.2"></a><a name="id2513482"></a>B.2.</td><td align="left" valign="top"> 
Does Gallery work under Windows? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
Many people have gotten Gallery to work under Windows using Apache. However, 
Gallery does not interact well with IIS, because PHP still has some issues 
with executing programs like NetPBM and ImageMagick. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.b.3"></a><a name="id2582903"></a>B.3.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.b.3"></a><a name="id2513507"></a>B.3.</td><td align="left" valign="top"> 
How do I run PHP as a CGI? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
Running PHP as a CGI is usually done when PHP is not available on your 
@@ -79,7 +79,7 @@ 
directory. It is extremely difficult to provide support for 
this, because there are many things that can go wrong and it's hard to 
diagnose the problem. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.b.4"></a><a name="id2583072"></a>B.4.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.b.4"></a><a name="id2513714"></a>B.4.</td><td align="left" valign="top"> 
How do I force .php files to use PHP4? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
In the rare case that your ISP has PHP3 and PHP4 installed on the same server, 
@@ -91,7 +91,7 @@ 
ForceType application/x-httpd-php 
</Files> 
</pre> 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.b.5"></a><a name="id2583101"></a>B.5.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.b.5"></a><a name="id2513755"></a>B.5.</td><td align="left" valign="top"> 
Where can I find the unzip and zipinfo 
binaries? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
diff -ru gallery-1.4.4-pl4/docs/g1package/gallery1-install.faq.c.html gallery-1.4.4-pl5/docs/g1package/gallery1-install.faq.c.html 
--- gallery-1.4.4-pl4/docs/g1package/gallery1-install.faq.c.html 2004-11-03 14:32:16.000000000 -0500 
+++ gallery-1.4.4-pl5/docs/g1package/gallery1-install.faq.c.html 2005-01-26 06:44:36.000000000 -0500 
@@ -104,7 +104,7 @@ 
I've forgotten my admin password! How can I reset it? 
</a></dt><dt>C.38. <a href="gallery1-install.faq.c.html#gallery1-install.faq.c.38"> 
Why are my picture frames screwed up? 
- </a></dt></dl></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.1"></a><a name="id2583159"></a>C.1.</td><td align="left" valign="top"> 
+ </a></dt></dl></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.1"></a><a name="id2513826"></a>C.1.</td><td align="left" valign="top"> 
When I try to access the configuration wizard, I get a <tt class="literal">500 
Internal Server Error</tt>. What's up? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -122,7 +122,7 @@ 
If you don't have access to your <tt class="filename">httpd.conf</tt>, delete 
the <tt class="filename">.htaccess</tt> file in the <tt class="filename">setup/</tt> 
directory. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.2"></a><a name="id2583234"></a>C.2.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.2"></a><a name="id2513914"></a>C.2.</td><td align="left" valign="top"> 
I've installed Gallery and all seems well. But when I try to upload an 
image it says <tt class="literal">Unable to make thumbnail(0)</tt> or 
<tt class="literal">Invalid image</tt>. What gives? 
@@ -203,7 +203,7 @@ 
</li></ul></div> 
If you still can't find a solution, try asking in the <a href="http://gallery.sf.net/forums.php" target="_top"> 
Gallery Support Forums</a>. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.3"></a><a name="id2583510"></a>C.3.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.3"></a><a name="id2514202"></a>C.3.</td><td align="left" valign="top"> 
My ISP has a really old version of PHP, something before 4.0.4pl1, which 
Gallery can't work with. What do I do? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -212,14 +212,14 @@ 
probably contains security problems. Your only other good option is to 
install PHP as a CGI, as in <a href="gallery1-install.faq.b.html#gallery1-install.faq.b.3">FAQ B.3 
</a> 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.4"></a><a name="id2583533"></a>C.4.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.4"></a><a name="id2514237"></a>C.4.</td><td align="left" valign="top"> 
Whenever I try to upload grayscale JPEG images I get a <tt class="literal">Unable to 
make thumbnail</tt> error. Why? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
This is a bug in some versions of NetPBM that cause it to choke on grayscale 
images. This is fixed in the version of NetPBM available on the Gallery 
download page. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.5"></a><a name="id2583558"></a>C.5.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.5"></a><a name="id2514269"></a>C.5.</td><td align="left" valign="top"> 
Whenever I try to upload an image in Gallery, I get all these errors about 
<tt class="literal">safe mode</tt>. How can I fix this? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -237,7 +237,7 @@ 
Find another host that doesn't use safe mode. Some are listed in the 
<a href="http://gallery.sourceforge.net/wiki.php?page=Web%20Hosting%20Referral%20Page" target="_top"> 
Gallery Hosting Referrals Page</a> 
- </li></ol></div></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.6"></a><a name="id2583620"></a>C.6.</td><td align="left" valign="top"> 
+ </li></ol></div></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.6"></a><a name="id2514350"></a>C.6.</td><td align="left" valign="top"> 
Why can't I upload big files (over a megabyte or two)? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
Craig Goranson wrote a very informative <a href="http://marc.theaimsgroup.com/?l=gallery-users&m=102589601604892&w=2" target="_top"> 
@@ -259,14 +259,14 @@ 
you want (until you hit <tt class="literal">upload_max_filesize</tt> and/or 
<tt class="literal">post_max_size</tt> -- see the above email link for more 
information). 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.7"></a><a name="id2583835"></a>C.7.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.7"></a><a name="id2514452"></a>C.7.</td><td align="left" valign="top"> 
When I try to run configure.sh, I get an error like this: 
<tt class="literal">chmod: getting attributes of `setup\r': No such file or directory</tt> 
How do I fix that? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
The answer is to simply upload the <tt class="filename">configure.sh</tt> file 
in <tt class="literal">ASCII FTP mode</tt> 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.8"></a><a name="id2583878"></a>C.8.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.8"></a><a name="id2514499"></a>C.8.</td><td align="left" valign="top"> 
When I try to click on the "[login]" link on the Gallery page, nothing happens 
(no window pops up). What's wrong? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -287,7 +287,7 @@ 
(note the "www" is missing), you'll still see your Gallery, but you'll 
experience this problem. The solution is to pick one hostname and stick 
with it. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.9"></a><a name="id2584036"></a>C.9.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.9"></a><a name="id2514545"></a>C.9.</td><td align="left" valign="top"> 
When I try to login, everything seems to go correctly, but Gallery doesn't 
log me in? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -334,7 +334,7 @@ 
you need to use the one that is specified in your configuration. If you use the one 
that's not specified, you may be unable to login. Another remedy for this issue is 
to follow the instructions in <a href="gallery1-install.faq.c.html#gallery1-install.faq.c.22">FAQ C.22</a> 
- </li></ul></div></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.10"></a><a name="id2584250"></a>C.10.</td><td align="left" valign="top"> 
+ </li></ul></div></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.10"></a><a name="id2514736"></a>C.10.</td><td align="left" valign="top"> 
Why do I see <tt class="literal">Warning: Undefined variable: GALLERY_BASEDIR... 
</tt> at the top of the page? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -355,7 +355,7 @@ 
<pre class="screen"> 
php_value error_reporting 2039 
</pre> 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.11"></a><a name="id2584317"></a>C.11.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.11"></a><a name="id2514822"></a>C.11.</td><td align="left" valign="top"> 
I can successfully upload photos, but when I look in my album all I see 
are broken image icons. Why? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -363,7 +363,7 @@ 
wizard. You can fix this by re-running the config wizard and correcting 
the Albums URL value or you can edit the <tt class="filename">config.php</tt> 
file and fix the $gallery->app->albumDirURL variable. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.12"></a><a name="id2584341"></a>C.12.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.12"></a><a name="id2514855"></a>C.12.</td><td align="left" valign="top"> 
Why do I get <tt class="literal">Failed opening 'html_wrap/inline_albumthumb.header.default'</tt> 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
If you unzipped/untarred the Gallery script on a Mac running OS 9.2.1 
@@ -377,7 +377,7 @@ 
will solve this. This is only a problem if its untarred/gzipped on a Mac. 
If they are unzipped on the server they will work fine. [Thanks James 
O'Donnell] 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.13"></a><a name="id2584453"></a>C.13.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.13"></a><a name="id2514912"></a>C.13.</td><td align="left" valign="top"> 
Why do I see this error: 
<pre class="screen"> 
jpegtopnm: WRITING PPM FILE 
@@ -391,7 +391,7 @@ 
</li><li> 
Your NetPBM binaries have a bug. Please use the NetPBM binaries found 
on the Gallery Download Page. 
- </li></ol></div></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.14"></a><a name="id2584504"></a>C.14.</td><td align="left" valign="top"> 
+ </li></ol></div></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.14"></a><a name="id2514974"></a>C.14.</td><td align="left" valign="top"> 
Why, when I try to upload images, does it say <tt class="literal">No images uploaded 
</tt>? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -405,7 +405,7 @@ 
<tt class="literal">file_uploads</tt> isn't enabled, then you won't be able 
to upload images to Gallery, and you should talk to your system 
administrator. 
- </li></ol></div></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.15"></a><a name="id2584572"></a>C.15.</td><td align="left" valign="top"> 
+ </li></ol></div></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.15"></a><a name="id2515055"></a>C.15.</td><td align="left" valign="top"> 
Why do I get this error: <tt class="literal">Warning: fopen(".../albums/team/album.dat.lock","a+")</tt>? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
This typically happens when your ISP makes a change in your environment 
@@ -427,7 +427,7 @@ 
directory 777. Make sure you chmod the <tt class="filename">.users</tt> 
directory, which can sometimes be hidden from view. See <a href="gallery1-install.faq.c.html#gallery1-install.faq.c.19"> 
FAQ C.19</a> for more details 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.16"></a><a name="id2584626"></a>C.16.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.16"></a><a name="id2515130"></a>C.16.</td><td align="left" valign="top"> 
Why do I get the error <tt class="literal">Allowed memory size of Xxx bytes exhausted 
</tt>? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -446,7 +446,7 @@ 
When adding that line to <tt class="filename">.htaccess</tt>, you must use a 
number, in bytes. For example, 8MB would be about 8000000 bytes. 
</div> 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.17"></a><a name="id2584698"></a>C.17.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.17"></a><a name="id2515216"></a>C.17.</td><td align="left" valign="top"> 
Why do I get <tt class="literal">pnmtojpeg: No such file or directory when uploading 
images</tt>? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -470,7 +470,7 @@ 
</li><li> 
Upgrade to Gallery v1.3.4 which lets you specify which one you have in 
the config wizard. 
- </li></ol></div></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.18"></a><a name="id2584798"></a>C.18.</td><td align="left" valign="top"> 
+ </li></ol></div></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.18"></a><a name="id2515340"></a>C.18.</td><td align="left" valign="top"> 
Why do I get this warning: <tt class="literal">Your script possibly relies on a 
session side-effect which existed until PHP 4.2.3</tt>? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -491,7 +491,7 @@ 
</pre> 
 
This should be fixed in future versions of Gallery. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.19"></a><a name="id2584860"></a>C.19.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.19"></a><a name="id2515414"></a>C.19.</td><td align="left" valign="top"> 
Why, when I try to upload a <tt class="filename">.htaccess</tt> and chmod it with my FTP client, 
it "disappears"? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -504,7 +504,7 @@ 
for Chmod with WS_FTP</a>. If you use CuteFTP, see 
<a href="http://gallery.menalto.com/modules.php?op=modload&name=phpBB_14&file=index&topic=701&action=viewtopic&topic=1902" target="_top"> 
this thread in the forums.</a> 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.20"></a><a name="id2584900"></a>C.20.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.20"></a><a name="id2515464"></a>C.20.</td><td align="left" valign="top"> 
Why does uploading pictures on my RedHat 8.0 system result in an error 
or scewed picture? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -517,7 +517,7 @@ 
this thread in the forums</a>. Keep in mind that these are merely 
workarounds. The best option is to upgrade your PHP version to the latest 
from <a href="http://www.php.net/" target="_top">http://www.php.net/</a> 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.21"></a><a name="id2584998"></a>C.21.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.21"></a><a name="id2515510"></a>C.21.</td><td align="left" valign="top"> 
Why doesn't Gallery work correctly on my RedHat 9.0 system? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
As in Red Hat Linux versions since 8.0, the default web server is Apache 
@@ -529,7 +529,7 @@ 
<a href="http://www.php.net/" target="_top">http://www.php.net/</a>. See 
<a href="http://gallery.menalto.com/modules.php?op=modload&name=phpBB_14&file=index&action=viewtopic&topic=5741&1" target="_top"> 
this forum post</a> for information on how to compile PHP. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.22"></a><a name="id2585028"></a>C.22.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.22"></a><a name="id2515554"></a>C.22.</td><td align="left" valign="top"> 
How do I use Gallery both from inside my LAN and the internet? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><div class="note" ><h3 class="title">Note</h3> 
There is a fix planned for future versions of Gallery to allow the config 
@@ -585,7 +585,7 @@ 
Linux/Unix <tt class="filename">/etc/hosts</tt> 
</li></ul></div> 
</li></ul></div> 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.23"></a><a name="id2585352"></a>C.23.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.23"></a><a name="id2515782"></a>C.23.</td><td align="left" valign="top"> 
I'm running Gallery 1.3.4, PHP 4.0.4 and I get <tt class="literal">Call to undefined 
function: array_search() in view_photo.php</tt>? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -609,7 +609,7 @@ 
 
</pre><div class="note" ><h3 class="title">Note</h3> 
This has been fixed in Gallery 1.4.0 
- </div></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.24"></a><a name="id2585466"></a>C.24.</td><td align="left" valign="top"> 
+ </div></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.24"></a><a name="id2515848"></a>C.24.</td><td align="left" valign="top"> 
Why, when I edit an album or photo's text, do quotation marks appear 
as <tt class="literal">\'</tt> (e.g. <tt class="literal">John Doe\'s Album</tt>)? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -621,7 +621,7 @@ 
<div class="note" ><h3 class="title">Note</h3> 
As of Gallery 1.4.0, Gallery will strip the slashes from fields so that 
this does not happen, even if <tt class="literal">magic_quotes_gpc</tt> is on. 
- </div></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.25"></a><a name="id2585517"></a>C.25.</td><td align="left" valign="top"> 
+ </div></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.25"></a><a name="id2515914"></a>C.25.</td><td align="left" valign="top"> 
I can't extract a <tt class="literal">.tar.gz</tt> file on my Windows machine. 
Why not? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -637,12 +637,12 @@ 
</li><li> 
Unzip once more 
</li></ol></div> 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.26"></a><a name="id2585600"></a>C.26.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.26"></a><a name="id2516003"></a>C.26.</td><td align="left" valign="top"> 
Why do I get an <tt class="literal">EOF / read error reading magic number</tt> 
error when uploading pictures with NetPBM? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
Please see <a href="gallery1-install.faq.c.html#gallery1-install.faq.c.2">FAQ c.2</a> 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.27"></a><a name="id2585630"></a>C.27.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.27"></a><a name="id2516040"></a>C.27.</td><td align="left" valign="top"> 
Why do I get errors like this: <tt class="literal">Warning: open_basedir restriction in effect. File is in wrong 
directory in /home/johndoe/public_html/gallery/platform/fs_unix.php on line 53</tt>? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -651,20 +651,20 @@ 
Basically, your host has mis-configured this directive and not added the directory where Gallery 
is to the allowed directories where PHP can access and modify files. You'll need to contact them 
and ask them to add the directory where you website files are located. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.28"></a><a name="id2585661"></a>C.28.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.28"></a><a name="id2516082"></a>C.28.</td><td align="left" valign="top"> 
Why do I get this error: <tt class="literal">Warning: write failed: No space left on device (28) in Unknown on line 0</tt>? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
Your host setup a quota for the web server user. Though your account may still have 
space left, the quota for the web server user has been overrun. Basically, you'll need to contact 
your host and ask them to cleanup the filesystem and/or adjust the quota. If you are your host, 
adjust the quota using edquota. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.29"></a><a name="id2585694"></a>C.29.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.29"></a><a name="id2516126"></a>C.29.</td><td align="left" valign="top"> 
Why do I get this error: <tt class="literal">Warning: exec() has been disabled for security reasons</tt>? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
Basically, this is a form of safe mode. Gallery requires functions like <tt class="literal">exec()</tt> to 
perform operations on images. The steps to "fix" this problem are the same as in 
<a href="gallery1-install.faq.c.html#gallery1-install.faq.c.5">FAQ C.5</a>. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.30"></a><a name="id2585731"></a>C.30.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.30"></a><a name="id2516170"></a>C.30.</td><td align="left" valign="top"> 
Why can't I upload images using ImageMagick on FreeBSD? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
The default install of ImageMagick on FreeBSD doesn't seem to compile with some 
@@ -686,7 +686,7 @@ 
Then uninstall ImageMagick via ports (make deinstall clean) 
and reinstall it (make install clean) 
</li></ol></div> 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.31"></a><a name="id2585799"></a>C.31.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.31"></a><a name="id2516256"></a>C.31.</td><td align="left" valign="top"> 
How do I put my Gallery into debug mode? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
There are two ways, each pretty much equal in simplicity. 
@@ -712,7 +712,7 @@ 
</pre> 
And change "no" to "yes" This will enable some extra debugging features and turn up PHP's 
error reporting level. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.32"></a><a name="id2585878"></a>C.32.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.32"></a><a name="id2516356"></a>C.32.</td><td align="left" valign="top"> 
I have uploaded the NetPBM or ImageMagick binaries to my site, but 
I don't know the absolute path to specify in the configuration 
wizard. What do I do? 
@@ -729,7 +729,7 @@ 
</pre> 
View this file via the web (for example: http://www.example.com/gallery/ 
netpbm/test.php). It will tell you the absolute path to specify. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.33"></a><a name="id2585908"></a>C.33.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.33"></a><a name="id2516398"></a>C.33.</td><td align="left" valign="top"> 
When I try to enter an album, I get a 404 error. What's up? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
One of two things in happening 
@@ -749,7 +749,7 @@ 
</pre> 
Voila! The URLs should work correctly now. 
</li></ul></div> 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.34"></a><a name="id2585966"></a>C.34.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.34"></a><a name="id2516466"></a>C.34.</td><td align="left" valign="top"> 
I changed a value on Step 3 of the configuration wizard (or in 
<tt class="filename">config.php</tt>), but the change isn't taking effect. What's going on? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -761,7 +761,7 @@ 
Select "properties" from the <<admin options>> pulldown. 
Then, in the popup window you will be able to change the properties 
for that album. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.35"></a><a name="id2585994"></a>C.35.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.35"></a><a name="id2516512"></a>C.35.</td><td align="left" valign="top"> 
Can I host images on another server to conserve space? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
The straight answer is no. Gallery must have the images on the local 
@@ -776,7 +776,7 @@ 
will attempt to use the images on the server with lots of bandwidth, so that 
the local server doesn't suffer so much. More information is available in the 
<a href="gallery1-admin.mirroring.html" title="Mirroring Gallery">mirroring tutorial</a>. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.36"></a><a name="id2586027"></a>C.36.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.36"></a><a name="id2516566"></a>C.36.</td><td align="left" valign="top"> 
Why do I get errors with email on Windows? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
If you go to http://www.example.com/gallery/setup/check_mail.php and it gives you the following 
@@ -811,12 +811,12 @@ 
SMTP = smtp.server.com 
sendmail_from =

</pre> 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.37"></a><a name="id2586070"></a>C.37.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.37"></a><a name="id2516632"></a>C.37.</td><td align="left" valign="top"> 
I've forgotten my admin password! How can I reset it? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
Resetting your admin password is easy; just rerun the <a href="gallery1-install.config-wizard.html" title="The Configuration Wizard"> 
configuration wizard</a> and specify a new password on step 2. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.38"></a><a name="id2586232"></a>C.38.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.c.38"></a><a name="id2516664"></a>C.38.</td><td align="left" valign="top"> 
Why are my picture frames screwed up? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
If you have a file called gallery/css/embedded_style.css (ie 
diff -ru gallery-1.4.4-pl4/docs/g1package/gallery1-install.faq.d.html gallery-1.4.4-pl5/docs/g1package/gallery1-install.faq.d.html 
--- gallery-1.4.4-pl4/docs/g1package/gallery1-install.faq.d.html 2004-11-03 14:32:16.000000000 -0500 
+++ gallery-1.4.4-pl5/docs/g1package/gallery1-install.faq.d.html 2005-01-26 06:44:37.000000000 -0500 
@@ -8,7 +8,7 @@ 
(comment, images, etc..)? 
</a></dt><dt>D.4. <a href="gallery1-install.faq.d.html#gallery1-install.faq.d.4"> 
Something went wrong, it's not working! What do I do? 
- </a></dt></dl></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.d.1"></a><a name="id2586422"></a>D.1.</td><td align="left" valign="top"> 
+ </a></dt></dl></td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.d.1"></a><a name="id2516743"></a>D.1.</td><td align="left" valign="top"> 
How can I migrate my Gallery from one host to another? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"><div class="warning" ><h3 class="title">Warning</h3> 
If you are moving between a Windows and non-Windows host, please 
@@ -52,14 +52,14 @@ 
the albums directory you just uploaded, not a blank directory, as you 
would on a clean install of Gallery. After you secure Gallery, all your 
data should show up intact! 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.d.2"></a><a name="id2586556"></a>D.2.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.d.2"></a><a name="id2516860"></a>D.2.</td><td align="left" valign="top"> 
Why do I get this error after migration: <tt class="literal">Warning: fopen 
('.../albums/foo/album.dat.lock', 'a+')</tt>? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
This is caused by not recursively chmodding the new albums directory 0777. 
See FAQ <a href="gallery1-install.faq.c.html#gallery1-install.faq.c.15">C.15</a> for information 
on how to fix this. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.d.3"></a><a name="id2586588"></a>D.3.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.d.3"></a><a name="id2516898"></a>D.3.</td><td align="left" valign="top"> 
Will moving my Gallery to another host cause me to lose data 
(comment, images, etc..)? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
@@ -67,7 +67,7 @@ 
</a>, there should be no lose of data whatsoever. However, because of Murphy's 
law, it's a good idea not to delete your albums directory on your old host before 
you know everything is working on the new host. 
- </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.d.4"></a><a name="id2586613"></a>D.4.</td><td align="left" valign="top"> 
+ </td></tr><tr class="question"><td align="left" valign="top"><a name="gallery1-install.faq.d.4"></a><a name="id2516933"></a>D.4.</td><td align="left" valign="top"> 
Something went wrong, it's not working! What do I do? 
</td></tr><tr class="answer"><td align="left" valign="top"></td><td align="left" valign="top"> 
First, try again. Make sure you follow all the instructions in 
diff -ru gallery-1.4.4-pl4/docs/g1package/index.html gallery-1.4.4-pl5/docs/g1package/index.html 
--- gallery-1.4.4-pl4/docs/g1package/index.html 2004-11-03 14:32:19.000000000 -0500 
+++ gallery-1.4.4-pl5/docs/g1package/index.html 2005-01-26 06:44:41.000000000 -0500 
@@ -2,5 +2,5 @@ 
This guide is distributed under the terms of the <a href="http://www.gnu.org/licenses/gpl.txt" target="_top"> 
GNU General Public License</a>. 
</div></div></div><div></div><hr></div><div class="toc">Table of Contents<dl><dt><a href="preface.html">Preface</a></dt><dt><a href="gallery1-install.html">1. Gallery 1.x Installation Guide</a></dt><dd><dl><dt><a href="gallery1-install.overview.html">Overview</a></dt><dt><a href="gallery1-install.features.html">Features</a></dt><dt><a href="gallery1-install.credits.html">Credits</a></dt><dt><a href="gallery1-install.requirements.html">Installation Requirements</a></dt><dt><a href="gallery1-install.unix-ftp.html">Installing on a Unix/Linux Server with FTP</a></dt><dt><a href="gallery1-install.unix-shell.html">Installing on a Unix/Linux Server with Shell Access</a></dt><dt><a href="gallery1-install.windows.html">Installing on a Windows Server (Apache)</a></dt><dt><a href="gallery1-install.windows-iis.html">Installing on a Windows Server (IIS)</a></dt><dt><a href="gallery1-install.upgrade.html">Upgrading a Previous Gallery Installation</a></dt><dt><a href="gallery1-install.help.html">Getting Additional Help</a></dt><dt><a href="gallery1-install.required-programs.html">Installing Required Programs</a></dt><dt><a href="gallery1-install.remote-applets.html">Installing (or updating) Gallery Remote Applets</a></dt><dt><a href="gallery1-install.language-packs.html">Installing Language Packs</a></dt><dt><a href="gallery1-install.config-wizard.html">The Configuration Wizard</a></dt><dt><a href="gallery1-install.faq.html">Frequently Asked Questions</a></dt></dl></dd><dt><a href="gallery1-admin.html">2. Gallery 1.x Administration Guide</a></dt><dd><dl><dt><a href="gallery1-admin.basics.html">Basics</a></dt><dt><a href="gallery1-admin.users.html">Users and Permissions</a></dt><dt><a href="gallery1-admin.embedding.html">Embedding Gallery</a></dt><dt><a href="gallery1-admin.securing.html">Securing Gallery</a></dt><dt><a href="gallery1-admin.backup.html">Backup and Restore</a></dt><dt><a href="gallery1-admin.offline.html">Creating an Offline Copy</a></dt><dt><a href="gallery1-admin.patching.html">Patching your Gallery</a></dt><dt><a href="gallery1-admin.mirroring.html">Mirroring Gallery</a></dt></dl></dd><dt><a href="gallery1-user.html">3. Gallery 1.x User's Guide</a></dt><dd><dl><dt><a href="gallery1-user.import.html">Importing into gallery</a></dt><dt><a href="gallery1-user.watermark.html">Watermarking</a></dt></dl></dd></dl></div> 
- Documentation last generated on: Wed Nov 3 11:32:08 PST 2004 
+ Documentation last generated on: Wed Jan 26 06:44:25 EST 2005 
</div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"> </td><td width="20%" align="center"> </td><td width="40%" align="right"> </td></tr><tr><td width="40%" align="left" valign="top"> </td><td width="20%" align="center"> </td><td width="40%" align="right" valign="top"> </td></tr></table></div></body></html> 
diff -ru gallery-1.4.4-pl4/login.php gallery-1.4.4-pl5/login.php 
--- gallery-1.4.4-pl4/login.php 2004-05-20 18:06:03.000000000 -0400 
+++ gallery-1.4.4-pl5/login.php 2005-01-25 00:40:50.000000000 -0500 
@@ -17,7 +17,7 @@ 
* along with this program; if not, write to the Free Software 
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. 
* 
- * $Id: login.php,v 1.51 2004/05/20 22:06:03 cryptographite Exp $ 
+ * $Id: login.php,v 1.51.2.1 2005/01/25 05:40:50 cryptographite Exp $ 
*/ 
?> 
<?php 
@@ -27,8 +27,11 @@ 
// Security check. 
if (!isset($username)) { 
$username=""; 
+} else { 
+ /* decode user data, remove tags, and then re-encode using html entities for safe page display */ 
+ $username = htmlspecialchars(removeTags(urldecode($username))); 
} 
-$username = removeTags($username); 
+ 
doctype(); 
?> 
 
diff -ru gallery-1.4.4-pl4/search.php gallery-1.4.4-pl5/search.php 
--- gallery-1.4.4-pl4/search.php 2004-07-10 00:04:03.000000000 -0400 
+++ gallery-1.4.4-pl5/search.php 2005-01-25 00:40:50.000000000 -0500 
@@ -17,7 +17,7 @@ 
* along with this program; if not, write to the Free Software 
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. 
* 
- * $Id: search.php,v 1.61 2004/07/10 04:04:03 cryptographite Exp $ 
+ * $Id: search.php,v 1.61.2.1 2005/01/25 05:40:50 cryptographite Exp $ 
*/ 
?> 
<?php 
@@ -47,8 +47,11 @@ 
 
if (!isset($searchstring)) { 
$searchstring=""; 
+} else { 
+ /* urldecode, remove tags, and then encode htmlspecial chars to make string display-safe */ 
+ $searchstring = htmlspecialchars(removeTags(urldecode($searchstring))); 
} 
-$searchstring = removeTags($searchstring); 
+ 
if ($searchstring) { 
echo makeFormIntro("search.php"); 
?> 
diff -ru gallery-1.4.4-pl4/setup/.htaccess gallery-1.4.4-pl5/setup/.htaccess 
--- gallery-1.4.4-pl4/setup/.htaccess 2003-10-12 16:57:27.000000000 -0400 
+++ gallery-1.4.4-pl5/setup/.htaccess 2005-01-25 14:54:40.000000000 -0500 
@@ -1,4 +1,4 @@ 
-# $Id: .htaccess,v 1.16 2003/10/12 20:57:27 bharat Exp $ 
+# $Id: .htaccess,v 1.16.10.1 2005/01/25 19:54:40 cryptographite Exp $ 
<IfModule sapi_apache2.c> 
php_value auto_prepend_file ./php_value_ok.php 
php_value magic_quotes_gpc off 
@@ -9,6 +9,11 @@ 
php_value magic_quotes_gpc off 
</IfModule> 
 
+<IfModule mod_php5.c> 
+php_value auto_prepend_file ./php_value_ok.php 
+php_value magic_quotes_gpc off 
+</IfModule> 
+ 
Options +FollowSymLinks 
<IfModule mod_rewrite.c> 
RewriteEngine On 
diff -ru gallery-1.4.4-pl4/util.php gallery-1.4.4-pl5/util.php 
--- gallery-1.4.4-pl4/util.php 2004-08-22 20:41:43.000000000 -0400 
+++ gallery-1.4.4-pl5/util.php 2005-01-25 01:07:15.000000000 -0500 
@@ -17,7 +17,7 @@ 
* along with this program; if not, write to the Free Software 
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. 
* 
- * $Id: util.php,v 1.410.2.9 2004/08/23 00:41:43 cryptographite Exp $ 
+ * $Id: util.php,v 1.410.2.10 2005/01/25 06:07:15 cryptographite Exp $ 
*/ 
?> 
<?php 
@@ -2354,6 +2354,18 @@ 
return NULL; 
} 
 
+function getImVersion() { 
+ global $gallery; 
+ $version = array(); 
+ 
+ exec($gallery->app->ImPath .'/convert -version', $results); 
+ 
+ $pieces = explode(' ', $results[0]); 
+ $version = $pieces[2]; 
+ 
+ return $version; 
+} 
+ 
function compress_image($src, $out, $target, $quality, $keepProfiles=false) { 
global $gallery; 
 
@@ -2379,15 +2391,30 @@ 
} 
} 
break; 
+ 
case "ImageMagick": 
+ /* we just need the first digit = major version */ 
+ $ImVersion = floor(getImVersion()); 
+ // Set the keepProfiles parameter based on the version 
+ // of ImageMagick being used. 6.0.0 changed the 
+ // parameters again. 
+ if ($ImVersion == '5' && $keepProfiles) { 
+ $keepProfiles = ' +profile \'*\' '; 
+ } elseif ($ImVersion == '6' && $keepProfiles) { 
+ $keepProfiles = ' -strip '; 
+ } else { 
+ $keepProfiles = ''; 
+ } 
+ 
/* Preserve comment, EXIF data if a JPEG if $keepProfiles is set. */ 
$err = exec_wrapper(ImCmd('convert', "-quality $quality " 
. ($target ? "-size ${target}x${target} " : '') 
- . ($keepProfiles ? ' ' : ' +profile \'*\' ') 
+ . $keepProfiles 
. $srcFile 
. ($target ? " -geometry ${target}x${target} " : ' ') 
. $outFile)); 
break; 
+ 
default: 
if (isDebugging()) 
echo " " . _("You have no graphics package configured for use!")." "; 
diff -ru gallery-1.4.4-pl4/Version.php gallery-1.4.4-pl5/Version.php 
--- gallery-1.4.4-pl4/Version.php 2004-11-03 14:10:51.000000000 -0500 
+++ gallery-1.4.4-pl5/Version.php 2005-01-25 18:03:54.000000000 -0500 
@@ -17,7 +17,7 @@ 
* along with this program; if not, write to the Free Software 
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. 
* 
- * $Id: Version.php,v 1.972.2.74 2004/11/03 19:10:51 cryptographite Exp $ 
+ * $Id: Version.php,v 1.972.2.79 2005/01/25 23:03:54 ckdake Exp $ 
*/ 
?> 
<?php 
@@ -31,14 +31,14 @@ 
$gallery = new stdClass(); 
} 
 
-$gallery->version = '1.4.4-pl4'; 
+$gallery->version = '1.4.4-pl5'; 
$gallery->config_version = 82; 
$gallery->album_version = 31; 
$gallery->user_version = 5; 
$gallery->url = "http://gallery.sourceforge.net"; 
 
/* do not edit the date!! modified by CVS */ 
-$gallery->last_change=strtotime(substr('$Date: 2004/11/03 19:10:51 $', 7, -1)); 
+$gallery->last_change=strtotime(substr('$Date: 2005/01/25 23:03:54 $', 7, -1)); 
/* 
* PostNuke version info 
*/

Submitted by mombos on Thu, 2005-01-27 18:51.

can we not get a change log list of changed files. 
 
i have some mods on my forum and need to know which files have been updated. 
 
cheers

Submitted by sunchao on Mon, 2005-02-07 14:56.

i meet the same questiong as mandebooks ...

Gallery

Random Image

Login

Navigation

User login

Support Gallery!

New forum topics

User Testimonial

Gallery 1.4.4-pl5 Security Release