File size of core files

Hi,
I started using ZenPhoto and I got a problem. I installed it and everything was ok, but later I got server error becuse files in zp-core were using 1GB of filespace. I uploaded not more than 25 images with maximum 500kb per image...

Is there any solution for this? Becuse I can't afford gallery which uses 100mb for every photo...

Comments

  • acrylian Administrator, Developer
    The Zenphoto package is around 30 MB. Anything else would be the images plus cache files. I don't see how that could generate 1 GB from these few images. You need to find out what is actually that big. Maybe you accidentally uploaded something? (Just asking..).
  • Please also remember that the critical datapoint is not the size of the file you upload but its dimensions. Zenphoto does make cache versions of various sizes of your images.

    There are two libraries that might be doing the resizing depending on your server configuration. Normally it would be the `GD` library but we also support `Imagick`. The latter is proported to be better at making effective sized images.

    You can also play with the image quality option to reduce the quality (and thus the size) of the cached images.
  • Thank you for your replies.

    Someone uploaded few images which were 5mb in size, which still doesn't clarify the few 100MB core.xxxxx files, but it doesn't matter becuse I reinstalled ZenPhoto and now it works fine.
  • acrylian Administrator, Developer
    The only guess would be that some files got into zp-core that should not have been there.
  • They're malicious files. This has come up before:

    http://www.zenphoto.org/support/topic.php?id=10173

    It may or may not be Zenphoto that has the vulnerability allowing these files to be created on your server. It could be any other scripts you're running, or perhaps a vulnerability outside of your hosting account. These files are usually shell scripts of varying complexity, and are very serious security holes. The attacker using them could gain way too much access to a poorly protected server this way.
Sign In or Register to comment.