Worrying respons to Verify Integrity

Random stuff about serendipity. Discussion, Questions, Paraphernalia.
Post Reply
accampbell
Regular
Posts: 138
Joined: Fri Jun 09, 2006 8:59 pm
Location: London, UK
Contact:

Worrying respons to Verify Integrity

Post by accampbell »

Some time ago I made the alterations suggested in the blog on this site (December 21), deleting the files suggested there.

Following another post in this forum I just did verification on my site and got the following:

* include/functions_config.inc.php corrupt or modified: failed verification
* htmlarea/plugins/HtmlTidy/html-tidy-logic.php corrupt or modified: failed verification
* htmlarea/plugins/InsertSnippet/snippets.php corrupt or modified: failed verification
* htmlarea/plugins/ImageManager/config.inc.php corrupt or modified: failed verification
* htmlarea/plugins/ExtendedFileManager/config.inc.php corrupt or modified: failed verification
* htmlarea/plugins/SuperClean/tidy.php corrupt or modified: failed verification
* htmlarea/plugins/SpellChecker/aspell_setup.php corrupt or modified: failed verification
* htmlarea/plugins/SpellChecker/spell-check-logic.php corrupt or modified: failed verification
* htmlarea/plugins/FormOperations/formmail.php corrupt or modified: failed verification
* htmlarea/contrib/php-xinha.php corrupt or modified: failed verification

Question: is it enough simply to upload the latest version of Serendipity or should I first delete all this stuff manually?
Anthony Campbell
garvinhicking
Core Developer
Posts: 30022
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Re: Worrying respons to Verify Integrity

Post by garvinhicking »

Hi!

When you deleted the files, that's okay. The official s9y release still has those file (hey, actually some people use the functionality provided by that WYSIWYG component). If you don't use those, it's safer to keep the files removed.

Regards,
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/
Timbalu
Regular
Posts: 4598
Joined: Sun May 02, 2004 3:04 pm

Re: Worrying respons to Verify Integrity

Post by Timbalu »

Hi Anthony

This is curious with the functions_config.inc.php.... wonder what happend there.

Erasing the htmlarea folder first is a good idea, but you have to check other writable places
(like /uploads, /templates_c, /archives, serendipity_config_local.inc.php (, .htaccess) and the database) too.

If this is done and you beginn to upload the 1.5.5 make sure the functions_config.inc.php gets overridden with the 1.5.5 version.

Ian
accampbell
Regular
Posts: 138
Joined: Fri Jun 09, 2006 8:59 pm
Location: London, UK
Contact:

Re: Worrying respons to Verify Integrity

Post by accampbell »

Sorry - I'm still not clear what I should do. Ignore the error messages? Delete all the files that Verify objects to? Delete everything and start again?
Anthony Campbell
onli
Regular
Posts: 2825
Joined: Tue Sep 09, 2008 10:04 pm
Contact:

Re: Worrying respons to Verify Integrity

Post by onli »

You deleted the files, the verification had to fail. You can simply ignore the message.

The verification of functions_config.inc.php is another story, guess you changed that file? Have a look in it if not.
Timbalu
Regular
Posts: 4598
Joined: Sun May 02, 2004 3:04 pm

Re: Worrying respons to Verify Integrity

Post by Timbalu »

it says:

If you dont need htmlarea functionality erase this folder and dont copy the new one (Garvin).
and I said: check for things that dont belong to you in the mentioned folders, files and places
and then just do the upgrade.

Ian
accampbell
Regular
Posts: 138
Joined: Fri Jun 09, 2006 8:59 pm
Location: London, UK
Contact:

Re: Worrying respons to Verify Integrity

Post by accampbell »

Thanks for the clarification. I removed the htmlarea folder without ill-effects.

I'm not sure about functions_config.inc.php. It was changed in August and I think I may have done so in the course of sorting out a password problem with Gavin's help. I can't be sure. Perhaps I should upload a new version just of that file?
Anthony Campbell
Timbalu
Regular
Posts: 4598
Joined: Sun May 02, 2004 3:04 pm

Re: Worrying respons to Verify Integrity

Post by Timbalu »

this depend on the serendipity version you are running.
To be save I would do a full upgrade.

Ian
accampbell
Regular
Posts: 138
Joined: Fri Jun 09, 2006 8:59 pm
Location: London, UK
Contact:

Re: Worrying respons to Verify Integrity

Post by accampbell »

I downloaded the file and compared it (with vimdiff) with the file from the latest version of Serendipity. The two are completely identical so perhaps I should simply leave things as they are.
Anthony Campbell
Timbalu
Regular
Posts: 4598
Joined: Sun May 02, 2004 3:04 pm

Re: Worrying respons to Verify Integrity

Post by Timbalu »

this may very well be, but you are running S9y 1.5.3., as I can see.
With 1.5.4 there were some bugfixes and minor improvements and
lastly 1.5.5 fixed the vulnerable htmlarea thing you were concerned about.

Updating is very easy and it doesn't cost the world. ;-)

Ian
accampbell
Regular
Posts: 138
Joined: Fri Jun 09, 2006 8:59 pm
Location: London, UK
Contact:

Re: Worrying respons to Verify Integrity

Post by accampbell »

Point taken. I'll do that tomorrow.
Anthony Campbell
Post Reply