Gallery 3 is no longer working for my website

I wonder if you got hit with an exploit, a script kiddie could have changed the admin password if something popped up and you haven't been keeping it updated.

We're releasing both Gallery 3.0.3 and Gallery 2.3.2 as security releases. Several researchers, working independently, discovered possible encryption-related vulnerabilities. Low-risk XSS vulnerabilities limited to the administration area were also reported
my hosts fantastico is 3.02

Quote from menace33 : Well let's see. If you reset the database password for the gallery, then you can go into the config.php or whatever the file name is, and change the mysql password to that of the reset password. That should allow access again to the php script to access the gallery database again. That's how it works for a great many image galleries but cannot necessarily state that it is the same set for Gallery 3. If you want I can do a quick install on my web host and check it out. Wouldn't take long at all to get the lay of the land for Gallery 3.

If you want to, go for it. I'd certainly appreciate any insight you have. I'm at my wit's end as far as what to do at this point.

Quote from Frogstar : I wonder if you got hit with an exploit, a script kiddie could have changed the admin password if something popped up and you haven't been keeping it updated.

It's possible. They could always research my pics and then find out where I live based on who owns the site. They are welcome to come have a beer or get shot.

Quote from stufine : We're releasing both Gallery 3.0.3 and Gallery 2.3.2 as security releases. Several researchers, working independently, discovered possible encryption-related vulnerabilities. Low-risk XSS vulnerabilities limited to the administration area were also reported my hosts fantastico is 3.02

What does this mean, and who is "we"?

Quote from chewspam : If you want to, go for it. I'd certainly appreciate any insight you have. I'm at my wit's end as far as what to do at this point.

Alright, here goes with the web install...

Step 1 - It states where the files are stored and then asks for a database name, username, password, host, and table prefix. It defaults to root as the database user. Not sure if you pre-configured your database or let it configure one for you. Not sure either if you used root for the username or configured a user. I'm sure you can retrace your steps on that one.

Step 2 - Installation of gallery and auto-creation of admin username and password.

Step 3 - logging into the gallery for the first time.

Now...it took a while to get used to the file structure but the database file is located under gallery3/var and is called database.php. The username and password are in plain text within this file. Edit this file and put in the reset database password where it lists:

Quote : 'pass' => 'pw',

Make note also of the username:

Quote : 'user' => 'un',

Then try to open up your gallery and then check the same log files to see what error messages come up if it fails again.

Also verify within the Databases panel that you have that username as listed in the database.php file.

Quote from chewspam : What does this mean, and who is "we"?

"we" = the makers of the program. which makes me think you used your host installer to install it for you.
me personally, I would have no problem allowing menace access to my site to fix a problem. you could even change login/pass afterwards.

Quote from menace33 : Alright, here goes with the web install... Step 1 - It states where the files are stored and then asks for a database name, username, password, host, and table prefix. It defaults to root as the database user. Not sure if you pre-configured your database or let it configure one for you. Not sure either if you used root for the username or configured a user. I'm sure you can retrace your steps on that one. Step 2 - Installation of gallery and auto-creation of admin username and password. Step 3 - logging into the gallery for the first time. Now...it took a while to get used to the file structure but the database file is located under gallery3/var and is called database.php. The username and password are in plain text within this file. Edit this file and put in the reset database password where it lists: Make note also of the username: Then try to open up your gallery and then check the same log files to see what error messages come up if it fails again. Also verify within the Databases panel that you have that username as listed in the database.php file.

Okay.....so I'm reinstalling and starting all over. I'm thinking something happened to my index.php file -- like it got redirected some how. But again, it's been months since I've done anything with it so I'm not sure what.

Quote from stufine : "we" = the makers of the program. which makes me think you used your host installer to install it for you. me personally, I would have no problem allowing menace access to my site to fix a problem. you could even change login/pass afterwards.

That's too funny. I used my host to set up the SQL DB, but I followed the direction on your website to install it. My host is good for nothing but billing me on time. I'm thinking of switching.

your is not me
was just reading stuff on their site. i have enough trouble keeping my site out of the hands of something liberation army..lol
they changed my joomla site and were trying to take down hostable.com i guess.. that host was having all kinds of troubles

Once I reinstalled, I was able to enter my old sql server address, but everything was gone. I went back to look at all of the files on my website, and under the "var" directory, there wasn't anything. No DB, no error logs, nothing.

That explains why i couldn't find any logs unless they were located in other directories!

Thanks, guys, for your help. I guess I'll get started loading up another 4 to 5 thousand pictures again.

Quote from stufine : your is not me was just reading stuff on their site. i have enough trouble keeping my site out of the hands of something liberation army..lol they changed my joomla site and were trying to take down hostable.com i guess.. that host was having all kinds of troubles

What's that all about?

Quote from chewspam : Once I reinstalled, I was able to enter my old sql server address, but everything was gone. I went back to look at all of the files on my website, and under the "var" directory, there wasn't anything. No DB, no error logs, nothing. That explains why i couldn't find any logs unless they were located in other directories! Thanks, guys, for your help. I guess I'll get started loading up another 4 to 5 thousand pictures again. What's that all about?

free host always have troubles. after the email took a dive i just switched it to gmail. shouldn't have troubles with that.

did you look in the /var before re-installing? just wondering
your original backup files. did you backup everything. thought i read upgrading was install new and move /var back over and run the updater php

double check before you go uploading everything again... remember the difference between relative and fully qualified paths

/var is not necessarily the same as ./var

Quote from stufine : free host always have troubles. after the email took a dive i just switched it to gmail. shouldn't have troubles with that. did you look in the /var before re-installing? just wondering your original backup files. did you backup everything. thought i read upgrading was install new and move /var back over and run the updater php

I didn't even see that! I'll try that when i'm back at home base.

Quote from vivahate : double check before you go uploading everything again... remember the difference between relative and fully qualified paths /var is not necessarily the same as ./var

yes. it was/is the var in the gallery directory
http://codex.gallery2.org/Gallery..._upgrading

Quote from chewspam : Thanks, guys, for your help. I guess I'll get started loading up another 4 to 5 thousand pictures again.

If it does come down to that, the older versions supported uploading of ZIP files, then it would unzip and process them. Can't imagine they'd dump such a useful feature.

Quote from Frogstar : If it does come down to that, the older versions supported uploading of ZIP files, then it would unzip and process them. Can't imagine they'd dump such a useful feature.

Interesting. I still have my folders with all of the pics I originally uploaded though.