+- ZenphotoCMS Forum (https://forum.zenphoto.org)
+-- Forum: Support (https://forum.zenphoto.org/forum-1.html)
+--- Forum: General support (https://forum.zenphoto.org/forum-4.html)
+--- Thread: Hacking? (/thread-11838.html)
Hacking? - dsoldi - 2014-06-23
Hi, I'm experiencing a strange problem: after upgrading to 1.4.6, some files (e.g. "full-image.php" and "functions-image.php") are immediately delete from "zp-core" directory as they are uploaded. No way to keep these files on the site.
RUN SETUP function report this warning:
... Verify following files:
index.php
zp-core/full-image.php
zp-core/functions-image.php
zp-core/zp-extensions/cloneZenphoto/clone.php
zp-core/zp-extensions/elFinder/php/elFinderVolumeDriver.class.php
zp-core/zp-extensions/elFinder/php/elFinderVolumeLocalFileSystem.class.php
any ideas?
Hacking? - dsoldi - 2014-06-24
Edit.
By removing the last two "if" statements from "full-image.php" it is no longer deleted (it doesn't work, of course) ... opened a ticket to my provider...
Hacking? - acrylian - 2014-06-24
Zenphoto does not delete anything automatically. If it lists files on setup that "might" be a problem it offers to delete them but you have to take action yourself to actually delete them.
http://www.zenphoto.org/news/installation-and-upgrading#re-running-and-re-uploading-setup-files
Hacking? - dsoldi - 2014-06-24
Ty acrylian, I know ... and I've strictly followed the directions you linked. I suspect that my provider has something watching into php fiels. After removing lines from 202 to the end in full-image.php it is no longer deleted (!!!).
Still waiting a replay from my provider ...
Hacking? - acrylian - 2014-06-24
All right. Do you use any install helper? Then that might be its fault. Zenphoto for sure does not delete anything.
Hacking? - dsoldi - 2014-06-25
Problem solved.
The files was deleted by an antivirus on the web server (now disabled).
The file full-image.php (e.g.) was deleted due to the SYMLINK command in line 208 (!)
Thinking to change web provider ....
Hacking? - sbillard - 2014-06-25
Good information. Thanks for the update.
It is ironic that they would trigger on the function call and delete the script rather than just disabling the `simlink` feature. Zenphoto can work perfectly well without using `symlink`, it is just faster and more space efficient if it can use the function.
Hacking? - dsoldi - 2014-06-26
More ironic?
Symlink feature IS disabled!