Sbillard

I'm sorry but I don't know what other information to give out.

I downloaded Zenphoto filled in Database info and then when i pressed the submit button this error comes up below.

Warning: phpinfo() has been disabled for security reasons in /home/guild75/public_html/zenphoto/zp-core/functions-basic.php on line 1494

Not sure what to do about it.

And no im not a Software expert im just a student who knows bits about websites. And I suggested there was a coding error.

I gave out all the errors.

It gave me a choice on what to click on in the drop down menu and these comes up:

MySQL
PDO_MySQL
PDO_MySQL (experimental)

I tried with all of them but the same message came up.

Please tell us configuration details about your server as well (php version, mysql version for example).

If one install works and another doesn't, something is wrong. Install credentials, upload (sometimes files are wrongly uploaded) or the server config itself.

Your post said you were getting errors with MySQL on one site. Those do not appear above. But we can make a guess that you have not filled in your database credentials or you would not have such a drop-down. [See how a little bit of information makes a difference.]

As to the phpinfo() error, that is a choice your provider has made. It is perhpas an unfortunate (and certainly unnecessary) choice as it limits the capabilities of software to adapt to the PHP configuration. But the only thing you can do about it is to complain to your provider.

As to the choices of database: You should of choose the selection that corresponds to the database you setup. Hopefully you did not choose SQLite, but if you did, then choose it. Otherwise select a MySQL database. [BTW: you did misquote the line with "experimental". That one says PDO_SQLite (experimenal)]

PHP version 5.3.8
MySQL version 5.1.56

But it works fine with another website i have so its not my hosting provider.

I also think you dont understand what im on about is it because of my grammer? Well sorry I cant help it! Is there anywhere where i could send a print screen.

If it works with another install with the same Zenphoto version check the mysql credentials again. Otherwise send the actual mysql errors.

You could open a ticket on the bugtracker and attach a screenshot there.

Yeah ok I'll open a ticket

OK sent it

Thank you for the picture on the ticket. It does explain things. Your problem is solely the one with phpinfo() being disabled on your server. Since you say things work on another site we can presume that that site did no disable phpinfo() or is running Zenphoto 1.4.2 which has worked around this particular problem.

Your choices are:

Move to the provider that did not disable phpinfo() (this would be my suggestion as there is no valid reason to disable this function!)

Try the 1.4.2 release and see if it does bypass the problem.

OK thanks so i need to ask if they can enable phpinfo () script

Or shall i try a lower version of Zen Photos

Not a lower version--that would entail exposing your site to the recent security hole.

As mentioned in my post, you can try the 1.4.2 release which is in Release Candidate 2 status. See the announcement in the latest news box to the left.

OK ill download 1.4.2 so theres no way for me to talk to my host saying to add phpinfo ()script

Oh well I have downloaded the 1.4.2 Version and it works fine. So thank you very much for you help.

Just got another small issue I was wanting to upload files with photos in. So I clicked it and this came up what do i do??

Warning: get_cfg_var() has been disabled for security reasons in /home/guild3/public_html/zenphoto1/zp-core/zp-extensions/tiny_mce/plugins/ajaxfilemanager/inc/class.session.php on line 58

Same problem. You will not be able to use the filemanager to upload files on this server. BTW, if you really meant to upload images to albums, you should be using the upload tab, not files tab. Files tab is for generic file uploads to the uploaded folder.

If I were you, I would find a different provider. The above error is from a third party plugin we use. You would have to ask its developer if there is a possible fix. His site is http://www.phpletter.com/

see also http://www.2by2host.com/articles/php-errors-faq/disabled_get_cfg_var/

OK fab so i need to ask provider to remove get_cfg_var() and the phpinfo () script

Well, he will not be able to remove those unless there is some other way to get the information he needs for his product. Really, you should drop your provider. He is not providing you the service you deserve (and pay for, if it is not for free.)

There is absolutely no excuse for disabling those functions. It is not a security issue at all. Only PHP scripts have access to the functions. If you do not have trust for those scripts then the site should not allow them to run.

If an application is rogue it can do much worse than discover the PHP configuration with tools that the site cannot ban without crippling all usefull applications.

So your site disabling these functions is a hollow jesture. Like much il thought about decisions it punishes only the legitimate user. The others will still find a way to do their harm.