NineChime forum

Furry stuff, oekaki stuff, and other stuff.

You are not logged in.

#1 01-07-2011 09:09:09

kevinayP
New member

Unable to change any Owner Settings

Hi there! I installed Wacintaki and got it running perfectly fine on my site. However, when I try to change settings (Oekaki Title, or anything else) from the Owner Control Panel, nothing happened and the settings were not saved. Any idea as to what can cause this? Thanks!

Offline

#2 01-07-2011 17:23:14

Waccoon
Administrator

Re: Unable to change any Owner Settings

I tried to look at your "resource" folder in my web browser, and I got a 403 Forbidden error.  Sometimes, this means that your server is enforcing a more aggressive security policy than usual.

This could lead to two problems:
1) The config file is locked (read-only).
2) The server is using a spam/censoring filtering which is corrupting the new configuration settings.

Log in as the owner, and go to the "Diagnostics" menu.  At the bottom of the screen, there will be a list of files and folders.  Anything that has "Locked" next to its name is a problem.

If nothing is locked, then I'll give you an alternative control panel.  I had to remove the word "pr0n" from it to solve a filtering issue, but I suppose "xxx" might have the same issue.

Offline

#3 01-07-2011 23:35:07

kevinayP
New member

Re: Unable to change any Owner Settings

Waccoon wrote:

I tried to look at your "resource" folder in my web browser, and I got a 403 Forbidden error.  Sometimes, this means that your server is enforcing a more aggressive security policy than usual.

This could lead to two problems:
1) The config file is locked (read-only).
2) The server is using a spam/censoring filtering which is corrupting the new configuration settings.

Log in as the owner, and go to the "Diagnostics" menu.  At the bottom of the screen, there will be a list of files and folders.  Anything that has "Locked" next to its name is a problem.

If nothing is locked, then I'll give you an alternative control panel.  I had to remove the word "pr0n" from it to solve a filtering issue, but I suppose "xxx" might have the same issue.

Thanks for the quick reply! Nothing is locked, as you can see from the screenshot below.

http://i55.tinypic.com/24cxwrc.png

I maintain my own server (LEMP stack over Ubuntu Lucid Lynx), so I may be able to fix the aggressive security or the spam/censoring filtering - but I don't know how. Or maybe you can give me the alternative control panel instead? Once again, thank you very much!

Offline

#4 01-08-2011 00:22:06

Waccoon
Administrator

Re: Unable to change any Owner Settings

What bugs me is that you're not getting an error message.  If the board can't write the config file due to a filesystem problem, you should get an error.

So, I'm leaning more towards a filtering problem, but that's kind of odd if you're using a stock LAMP (LEMP?) setup on your own box.  Since the board installed just fine, I'm comparing the difference between the installer and cpanel to figure out what might be the issue.

Here's a modified cpanel for you to try:  cpanel 1.5.5

Other things:
1) Which fields are you changing?  Do they include the "Title" and "Author Name"?
2) Have you tried changing only a few at a time instead of a bunch of them?
3) In the "My Oekaki" administration menu, there's a "Log" option.  When you check the log, under Category/Commet, does it tell you the cpanel was updated recently?
4) Have you had any trouble updating your member profile, or is it just the control panel?

Offline

#5 01-08-2011 00:45:58

kevinayP
New member

Re: Unable to change any Owner Settings

Waccoon wrote:

What bugs me is that you're not getting an error message.  If the board can't write the config file due to a filesystem problem, you should get an error.

So, I'm leaning more towards a filtering problem, but that's kind of odd if you're using a stock LAMP (LEMP?) setup on your own box.  Since the board installed just fine, I'm comparing the difference between the installer and cpanel to figure out what might be the issue.

Here's a modified cpanel for you to try:  cpanel 1.5.5

Other things:
1) Which fields are you changing?  Do they include the "Title" and "Author Name"?
2) Have you tried changing only a few at a time instead of a bunch of them?
3) In the "My Oekaki" administration menu, there's a "Log" option.  When you check the log, under Category/Commet, does it tell you the cpanel was updated recently?
4) Have you had any trouble updating your member profile, or is it just the control panel?

Yeah, if there were any error message I might have a better chance in locating the problem. I didn't use any LEMP installation script - I installed everything one by one, but the setup should be the same as a stock LEMP setup - the only difference between a LAMP setup and a LEMP setup is that a LAMP setup uses Apache while a LEMP setup uses Nginx. So now I should rename the current cpanel to cpanel.php.bak and upload your cpanel.php to the Oekaki and then try to change something? Okay, I'll try to do that and report my findings here. And here are my answers to your questions.

1) I tried changing most of the fields there, including "Title" and "Author Name". None of them worked/saved.
2) I tried changing one of them at a time, two of them at a time, and a bunch of them at a time. Nothing's changed.
3) It did. Here's the screenshot.

http://i51.tinypic.com/nzg178.png

4) Nope, no problem at all updating my (or any other) member's profile. Just the control panel.

If all else fails, can I update the settings myself (probably by editing the config.php file)? I'll go ahead and try your alternative cpanel for now. Thanks!

Offline

#6 01-08-2011 01:41:43

kevinayP
New member

Re: Unable to change any Owner Settings

And nope, the changes I made to the Control Panel weren't saved even with the new customized cpanel.php sent by you. It's still the same as before - nothing's changed, but it shows up in the logs. Anything else you suggest I could try? :(

Last edited by kevinayP (01-08-2011 01:41:53)

Offline

#7 01-08-2011 05:05:31

Waccoon
Administrator

Re: Unable to change any Owner Settings

Okay, I updated the ZIP file with a couple changes.  Give this new cpanel a try.

As far as I can tell, the config file is writable, and is being opened properly.  But, it's not being written.  I've added another couple of tests to make sure that the write operation completes, and to verify that the written file is the size it should be.  I also read something interesting on the PHP web site that said writing a file could return "0" instead of "FALSE", so I took that into consideration as well.

If this still doesn't work, the next step would for me to give you a cpanel with an entirely new write routine, but it really shouldn't behave any differently.  You could also send me a copy of your config.php file (it does not contain any database or login information, though it does contain the board's encryption salt).

I find it really bizarre that the board would install just fine, and the config file is not locked, but the cpanel doesn't work.  I'm kind of stumped.

Offline

#8 01-08-2011 06:44:29

kevinayP
New member

Re: Unable to change any Owner Settings

http://i52.tinypic.com/i6wpw0.png

Still didn't work. Also, I just checked the config.php file. Even though the op_title is set to 'Vocaloidism Oekaki' like that, when you open my oekaki, the title still shows 'oekaki.vocaloidism.com'. Editing the config file on nano doesn't seem to make any difference. However... Okay, let's say the default value (on config.php, before I edit anything in cpanel.php) of op_title is set to 'Vocaloidism Oekaki'. I then open the control panel - the "Title" field is empty. I type 'Vocaloidism' into the field. Clicked Submit Changes. Clicked on the control panel again - the "Title" field is still empty. However, I opened the config.php again on nano - the op_title is set to 'Vocaloidism'! So it appears that the cpanel.php have been writing to config.php after all (don't know if it did this even before I changed the cpanel.php because I only checked it with the cpanel.php you sent me - should I check this with the original cpanel.php?). However it would seem that the changes aren't applied (any way I could test this? what value should I change that can produce a change I can see?) and the cpanel.php won't show the updated values. For example, the "URL to OekakiPoteto" is set to "A". I checked the config.php - and yes, the URL is set to "A". I opened the control panel, changed that to "B", and clicked submit changes. Checked the config.php again and yes, the URL is changed to "B". However, when I opened the control panel again, the value of "URL to OekakiPoteto" is set to "A" (before I edit the text field - even though on the config.php file it clearly says that the value of the URL is "B" - and I only changed it to test it - the value is "http://oekaki.vocaloidism.com/" - is this right?). If you'd like to see my config.php, you can download it by clicking here. Thanks for helping me in this issue! (:

Last edited by Waccoon (01-08-2011 18:19:05)

Offline

#9 01-08-2011 19:53:42

Waccoon
Administrator

Re: Unable to change any Owner Settings

Okay, this is really getting frustrating.  I think I know what's going on here, but why your server is doing it is beyond me.  That's the trouble with "automagic" security features.

Try downloading this file and put it in your oekaki folder:  xTest.zip

If you run it, you can try each test, but the output probably won't make much sense to you.  What it's supposed to do is try an number of filtering techniques when printing variables, to see if your server is doing some weird things.

There are some hardened versions of PHP out there that do some automatic filtering.  Do you know if you have "Suhosin" installed as a PHP extension?  You can check PHP extensions by going to the Diagnostics page, and under PHP Information, click "click for more details".

Offline

#10 01-08-2011 23:51:24

kevinayP
New member

Re: Unable to change any Owner Settings

Ah, yes, I do have Suhosin installed to increase the security against PHP vulnerabilities. Is that what's been causing the problems I've been having? Should I try to disable it and see if it solves the problem? I'm worried it'll open some security vulnerability to my server though - or is there any way to just disable Suhosin for the Oekaki directory? Anyways, I uploaded the file and here are the results of the tests. Since I can only post a maximum of four links in this forum, I'll only post the results of the first, second, fourth and fifth tests. The third test is giving me the same result as the second image - empty, like in the screenshots below. Thanks again for the help! (:

http://img547.imageshack.us/img547/3817/test1jk.png

http://img820.imageshack.us/img820/7610/test2ul.png

http://img834.imageshack.us/img834/2636/test4o.png

http://img440.imageshack.us/img440/6987/test5.png

Offline

#11 01-09-2011 02:16:57

Waccoon
Administrator

Re: Unable to change any Owner Settings

I updated the xTest script to add another test.  Test #6 will try to print out your entire config, so we can figure out which variables are not parsing and which are.  The encryption salt will be masked out.

The purpose of the old script was to determine if you have a PHP extension installed that prevents PHP from printing anything that has not been HTML encoded.  Some tools will do this to try to prevent XSS attacks, although my impression is that they cause more problems than they solve.  Thankfully, this doesn't appear to be a problem on your server.

This new script will try to figure out how many variables are empty.  I suspect that the "title" and "author" are the only ones affected, and I want to make sure.

To be honest, though, I still have no idea what's going on, and am not really sure where to go from here.  I'm using PHP 5.3.4, the latest version, so it can't be a parsing problem due to a new version of PHP.

You can try disabling Suhosin.  My server doesn't use it, and I've been running my oekaki with thousands of members for several years without incident.  Other than sanity checks for buffer overflow errors, I don't see what advantage it offers.  However, if disabling Suhosin doesn't fix the problem, turn it back on.

BTW, is the "author" field in your config file still blank?  Try putting something in there.  It doesn't matter what.

Offline

#12 01-09-2011 03:42:33

kevinayP
New member

Re: Unable to change any Owner Settings

Okay, I think my server configuration is what's causing all the trouble. Title and Author were empty, but I added them manually on config.php - they appeared on the sixth test. You can see the results by clicking here. Changing the title still didn't work. The title on the page still reads "oekaki.vocaloidism.com". I tried to disable suhosin. Restarted PHP so that suhosin would be disabled. It worked all of a sudden. The title of the page reads "Vocaloidism Oekaki" now. I tried enabling Suhosin again and restarting PHP. The title is still "Vocaloidism Oekaki" so I think Suhosin isn't what causes the problem. Changed the title to just "Vocaloidism" in the config.php manually - checked the site again, and the title is still "Vocaloidism Oekaki". That's when I thought maybe restarting the PHP would make the config file work again - so I restarted PHP again. And sure enough, it worked! The title changed to "Vocaloidism". Edited the config.php file using the cpanel.php - the control panel didn't show any changes, and then I restarted the PHP from SSH. The changes are applied after that! The title got changed back to "Vocaloidism Oekaki", right like what I want it to be. So yes, I'm not quite sure what's the problem right here... I'm using PHP-FPM as the FastCGI method to connect PHP and nginx. My PHP version is 5.3.0. Any idea as to what might cause this? Anyways, at least right now I have a working workaround - I just need to change config.php manually or using the control panel once and restart the PHP - it's not like I'm going to change the config.php file everyday or something. Thank you so much for the help! (:

Last edited by kevinayP (01-09-2011 03:46:10)

Offline

#13 01-09-2011 06:32:39

Waccoon
Administrator

Re: Unable to change any Owner Settings

Okay, so this is a caching issue of some sort, most probably with PHP bytecode caching.  What's happening now makes sense.  As to WHY it's happening, I don't have a clue.

Now, bear in mind that I'm using a Windows machine as my test platform, and I'm using PHP directly through the executable.  Every time I run a PHP script, it runs php.exe from scratch.  No accelerators, no Apache modules, no FastCGI, no background processes.  I've never touched FastCGI and have no idea how to set it up, and I only know that PHP-FPM has been included in the PHP core, but I don't know what it does.  So, most of what follows is just guesswork...

From what I gather, PHP generally has two "helpers".  The first is FastCGI or PHP-FPM, which runs as a separate process and prepares the CGI input for the server.  The second is an accelerator of some sort, which checks to see if the PHP scripts have changed recently and thus need to be recompiled to bytecode.  I've heard that there's a number of accelerators available for PHP, and they have to be installed as a PHP module or a Zend extension.  Whether the accelerator is configured in php.ini or whether it has its own config file... I have no idea.

My web host uses eAccelerator.  Once they had a configuration problem with it, which was returning some weird errors in the server log (not the PHP error log).  I helped them track down which config settings were causing the issue, but how my host implemented those changes is beyond me.  The key is that since the errors were in the server log, most likely it was on the FastCGI/Apache end, not PHP.

From what I can tell, since the oekaki config file is a PHP script, the problem here is that your PHP accelerator is misconfigured, and is always using old, cached versions of the config.php file.  When you "restart" PHP, it flushes the cache.  What you need to do is look for a config setting that controls how caching/acceleration is controlled.  On my system, I configured Apache to use php.exe as a handler for PHP files, and the executable is run in a new process every time Apache wants to run a PHP script.  It's slow, but it's easy to set up and I never run into caching issues and stuff like that.

What confuses me here is that if you're "restarting" PHP, that probably means restarting the FastCGI dispatcher.  How that would affect caching is beyond me, because I thought PHP did that.  Check your FastCGI config file first, and if there isn't anything related to acceleration, caching, or bytecode in that file, take a look at php.ini.  I doubt looking at any Nginx config files would be useful.

Sorry I'm a bit confused over this, but I've spent most of my time working with PHP code, but not setting up a production web server.

I'd be interested in knowing what happens, so please do let me know.  Thanks!

Offline

Board footer

Yep, still running PunBB
© Copyright 2002–2008 PunBB