Serendipity Forums

Some time ago I made the alterations suggested in the blog on this site (December 21), deleting the files suggested there.

Following another post in this forum I just did verification on my site and got the following:

* include/functions_config.inc.php corrupt or modified: failed verification
* htmlarea/plugins/HtmlTidy/html-tidy-logic.php corrupt or modified: failed verification
* htmlarea/plugins/InsertSnippet/snippets.php corrupt or modified: failed verification
* htmlarea/plugins/ImageManager/config.inc.php corrupt or modified: failed verification
* htmlarea/plugins/ExtendedFileManager/config.inc.php corrupt or modified: failed verification
* htmlarea/plugins/SuperClean/tidy.php corrupt or modified: failed verification
* htmlarea/plugins/SpellChecker/aspell_setup.php corrupt or modified: failed verification
* htmlarea/plugins/SpellChecker/spell-check-logic.php corrupt or modified: failed verification
* htmlarea/plugins/FormOperations/formmail.php corrupt or modified: failed verification
* htmlarea/contrib/php-xinha.php corrupt or modified: failed verification

Question: is it enough simply to upload the latest version of Serendipity or should I first delete all this stuff manually?

Hi!

When you deleted the files, that's okay. The official s9y release still has those file (hey, actually some people use the functionality provided by that WYSIWYG component). If you don't use those, it's safer to keep the files removed.

Regards,
Garvin

Hi Anthony

This is curious with the functions_config.inc.php.... wonder what happend there.

Erasing the htmlarea folder first is a good idea, but you have to check other writable places
(like /uploads, /templates_c, /archives, serendipity_config_local.inc.php (, .htaccess) and the database) too.

If this is done and you beginn to upload the 1.5.5 make sure the functions_config.inc.php gets overridden with the 1.5.5 version.

Ian

Sorry - I'm still not clear what I should do. Ignore the error messages? Delete all the files that Verify objects to? Delete everything and start again?

You deleted the files, the verification had to fail. You can simply ignore the message.

The verification of functions_config.inc.php is another story, guess you changed that file? Have a look in it if not.

it says:

If you dont need htmlarea functionality erase this folder and dont copy the new one (Garvin).
and I said: check for things that dont belong to you in the mentioned folders, files and places
and then just do the upgrade.

Ian

Thanks for the clarification. I removed the htmlarea folder without ill-effects.

I'm not sure about functions_config.inc.php. It was changed in August and I think I may have done so in the course of sorting out a password problem with Gavin's help. I can't be sure. Perhaps I should upload a new version just of that file?

this depend on the serendipity version you are running.
To be save I would do a full upgrade.

Ian

I downloaded the file and compared it (with vimdiff) with the file from the latest version of Serendipity. The two are completely identical so perhaps I should simply leave things as they are.

this may very well be, but you are running S9y 1.5.3., as I can see.
With 1.5.4 there were some bugfixes and minor improvements and
lastly 1.5.5 fixed the vulnerable htmlarea thing you were concerned about.

Updating is very easy and it doesn't cost the world.

Ian

Point taken. I'll do that tomorrow.