Serendipity Forums

I'd be grateful for any help on this matter.

I just upgraded from 0.9.1 to 1.2.1. (Side note: This was due to a spammer putting a subdirectory in my uploads directory, and using that to host pages advertising Viagra et al. Were there any known security holes in 0.9.1 that would have allowed that? I don't think they got my password--it should have been pretty resistant against dictionary attacks.)

I've got it connecting to my database correctly (Postgres), but it can't seem to find my uploads directory. Whenever I try to look at my "Media library" from my admin options, it just tells me "- No images found -." It lets me upload files to there, and those files show up when I check the file structure in Linux, but they don't show up either in my list.

Possibly significant: whenever I tell it to "Rebuild thumbs," the ones I uploaded since the upgrade always show up as "new/modified," even though they shouldn't be, anymore.

Let me know if you have any ideas.

The security hole was found, and it had nothing to do with Serendipity. There was an unsecured wiki on the same domain.

Now it's telling me this, when I look at my media library.

Unable to locate the file entitled 44, maybe it has already been deleted?
Unable to locate the file entitled 163, maybe it has already been deleted?

Does this give anyone an idea as to what might be wrong?

Hi!

This output comes from s9y and tells that the automatic synchronization with the media database found files in the database that no longer exist in your "uploads" directory.

Does your "uploads" directory still exist and contain files? To me this sounds as if the upgrade from 0.9 to 1.2.1 might have had problems. Did you get any error messages when upgrading, especially concerning DB update files? Can you check the pgsql error log to see if maybe a SQL query fails, that the media database uses to fetch the files?

Regards,
Garvin

Ah...that might be the problem.

I didn't get the chance to do a clean reinstall. When I alerted my sysadmins to the spammer, they completely shut down the old blog. I had to reinstall to a separate directory, without doing any kind of clean, proper upgrade.

I might be able to reinstall the old version now that the security problem's cleared up, and then do a proper upgrade. Do you think that would help?

(To answer your questions--yes, the uploads directory exists. I copied the files in it over by hand, using cp. I don't know how to check for SQL errors.)

Danke.

Hi!

Ah, that will definitely be a problem, because you are now running s9y 1.2 with the DB tables of 0.9, and those are missing updates.

If you're familiar with pgsql, you could check the SQL subdirectory of s9y, it contains *update* files from each interrim version to the next; you can execute those updates yourself. If there is no specific _pgsql file for a version stepping, the _mysql files are executed for pgsql, so you need to check both files.

HTH,
Garvin

I'm not familiar with pgsql, but I did manage to reinstall 0.9.1 and then do the proper upgrade to 1.2.1, so everything's working fine now. Thanks for your help--I really appreciate it.

Adam