#3766 - Security error
| Identifier | #3766 |
|---|---|
| Issue type | Major issue (breaks an entire feature) |
| Title | Security error |
| Status | Completed |
| Handling member | Chris Graham |
| Addon | news |
| Description | Fresh install via automatic install. Created a new, tried to upload an image an couldn't. Gallery images work fine.
Tried uploading an image via the advanced wysiwyg uploader, then tried the simplified one. When submitting a new news, tried uploading an image via the advanced dropdown, then chose image. While the image appeared to be on the server, it was not available to be used in the image field under the advanced dropdown. Similar issue when uploading an image via the attachment option, nothing is visible in the wysiwyg. However when I click on the 'attachment manager' link the images are there, but when i click on the 'choose thumbnail manually' in the 'advanced manager popup, I get the following error "Security error" (on a white screen). Again this is a clean install running on a shared server, tried in PHP 7.0, 7.1 and 7.2. Same issue. Running Composr 10.0.22 |
| Steps to reproduce | |
| Funded? | No |
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".


Comments
"Fresh install via automatic install. Created a new, tried" - I think you're missing the word 'attachment' in this sentence. Please confirm.
Cheers Chris.
1) Bugs in thumbnail_editor addon. These are now fixed in git.
2) Misunderstanding about 'Image' field. This is to set a representative image for that article only, shown adjacent to the news post in the news listings. It's not adding it to the set of images or showing on the article itself. I have amended it to be labelled 'Representative Image' instead. I also spotted and fixed a typo in the field description.
You should be using the attachments feature I'd guess (not knowing your intentions).