Some time ago I made the alterations suggested in the blog on this site (December 21), deleting the files suggested there.
Following another post in this forum I just did verification on my site and got the following:
* include/functions_config.inc.php corrupt or modified: failed verification
* htmlarea/plugins/HtmlTidy/html-tidy-logic.php corrupt or modified: failed verification
* htmlarea/plugins/InsertSnippet/snippets.php corrupt or modified: failed verification
* htmlarea/plugins/ImageManager/config.inc.php corrupt or modified: failed verification
* htmlarea/plugins/ExtendedFileManager/config.inc.php corrupt or modified: failed verification
* htmlarea/plugins/SuperClean/tidy.php corrupt or modified: failed verification
* htmlarea/plugins/SpellChecker/aspell_setup.php corrupt or modified: failed verification
* htmlarea/plugins/SpellChecker/spell-check-logic.php corrupt or modified: failed verification
* htmlarea/plugins/FormOperations/formmail.php corrupt or modified: failed verification
* htmlarea/contrib/php-xinha.php corrupt or modified: failed verification
Question: is it enough simply to upload the latest version of Serendipity or should I first delete all this stuff manually?
Worrying respons to Verify Integrity
-
- Regular
- Posts: 138
- Joined: Fri Jun 09, 2006 8:59 pm
- Location: London, UK
- Contact:
Worrying respons to Verify Integrity
Anthony Campbell
-
- Core Developer
- Posts: 30022
- Joined: Tue Sep 16, 2003 9:45 pm
- Location: Cologne, Germany
- Contact:
Re: Worrying respons to Verify Integrity
Hi!
When you deleted the files, that's okay. The official s9y release still has those file (hey, actually some people use the functionality provided by that WYSIWYG component). If you don't use those, it's safer to keep the files removed.
Regards,
Garvin
When you deleted the files, that's okay. The official s9y release still has those file (hey, actually some people use the functionality provided by that WYSIWYG component). If you don't use those, it's safer to keep the files removed.
Regards,
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/
Re: Worrying respons to Verify Integrity
Hi Anthony
This is curious with the functions_config.inc.php.... wonder what happend there.
Erasing the htmlarea folder first is a good idea, but you have to check other writable places
(like /uploads, /templates_c, /archives, serendipity_config_local.inc.php (, .htaccess) and the database) too.
If this is done and you beginn to upload the 1.5.5 make sure the functions_config.inc.php gets overridden with the 1.5.5 version.
Ian
This is curious with the functions_config.inc.php.... wonder what happend there.
Erasing the htmlarea folder first is a good idea, but you have to check other writable places
(like /uploads, /templates_c, /archives, serendipity_config_local.inc.php (, .htaccess) and the database) too.
If this is done and you beginn to upload the 1.5.5 make sure the functions_config.inc.php gets overridden with the 1.5.5 version.
Ian
-
- Regular
- Posts: 138
- Joined: Fri Jun 09, 2006 8:59 pm
- Location: London, UK
- Contact:
Re: Worrying respons to Verify Integrity
Sorry - I'm still not clear what I should do. Ignore the error messages? Delete all the files that Verify objects to? Delete everything and start again?
Anthony Campbell
Re: Worrying respons to Verify Integrity
You deleted the files, the verification had to fail. You can simply ignore the message.
The verification of functions_config.inc.php is another story, guess you changed that file? Have a look in it if not.
The verification of functions_config.inc.php is another story, guess you changed that file? Have a look in it if not.
Re: Worrying respons to Verify Integrity
it says:
If you dont need htmlarea functionality erase this folder and dont copy the new one (Garvin).
and I said: check for things that dont belong to you in the mentioned folders, files and places
and then just do the upgrade.
Ian
If you dont need htmlarea functionality erase this folder and dont copy the new one (Garvin).
and I said: check for things that dont belong to you in the mentioned folders, files and places
and then just do the upgrade.
Ian
-
- Regular
- Posts: 138
- Joined: Fri Jun 09, 2006 8:59 pm
- Location: London, UK
- Contact:
Re: Worrying respons to Verify Integrity
Thanks for the clarification. I removed the htmlarea folder without ill-effects.
I'm not sure about functions_config.inc.php. It was changed in August and I think I may have done so in the course of sorting out a password problem with Gavin's help. I can't be sure. Perhaps I should upload a new version just of that file?
I'm not sure about functions_config.inc.php. It was changed in August and I think I may have done so in the course of sorting out a password problem with Gavin's help. I can't be sure. Perhaps I should upload a new version just of that file?
Anthony Campbell
Re: Worrying respons to Verify Integrity
this depend on the serendipity version you are running.
To be save I would do a full upgrade.
Ian
To be save I would do a full upgrade.
Ian
-
- Regular
- Posts: 138
- Joined: Fri Jun 09, 2006 8:59 pm
- Location: London, UK
- Contact:
Re: Worrying respons to Verify Integrity
I downloaded the file and compared it (with vimdiff) with the file from the latest version of Serendipity. The two are completely identical so perhaps I should simply leave things as they are.
Anthony Campbell
Re: Worrying respons to Verify Integrity
this may very well be, but you are running S9y 1.5.3., as I can see.
With 1.5.4 there were some bugfixes and minor improvements and
lastly 1.5.5 fixed the vulnerable htmlarea thing you were concerned about.
Updating is very easy and it doesn't cost the world.
Ian
With 1.5.4 there were some bugfixes and minor improvements and
lastly 1.5.5 fixed the vulnerable htmlarea thing you were concerned about.
Updating is very easy and it doesn't cost the world.
Ian
-
- Regular
- Posts: 138
- Joined: Fri Jun 09, 2006 8:59 pm
- Location: London, UK
- Contact: