Jørn Wildt

Apparently the authentication check in the upload code is broken. Some users report situations where the check fails even though it should work.

Is it solved with the 3.1 release? It always gives "wrong auth. code - you can only submit" error to me. Thanks. By the way, this is a very nice application. Thank you!

I cannot remember why I wrote the first comment ... but I haven't heard anything in a long time, so I assume the problem is solved.

The "Wrong auth. code" means you have "reused" the same window by clicking the back button before you upload again. Always use a new "instance" of hte upload window. It is a security feature that disallows the reuse of a window (in this way a hacker cannot pretend to be you be ro-posting your data if he sniffed it somehow).

u wrote the following on
http://www.elfisk.dk/modules.php?op=modload&name=XForum&file=viewthread&tid=19#pid
currently i am trying to find out which "two lines" i will remove from the current
version's pnuser.php.

thank you for quick reply.

Try removing lines 1037+1038 from pnuser.php:

if (!pnSecConfirmAuthKey())
return photoshareErrorUser(_PSBADAUTHKEY);

Then retry your upload. If it works now then please send me (by mail) the HTML source of the upload form.

the only cost is i won't be able to write comments to my pictures. because it only gives this error when i try to "edit image" and write descriptions

if i could, i would. :)

can you please help j?rn?

also this could be useful: i can only import files from server. no admin or user can upload because of that error.

In version 3.1.0 it is in photoshare_user_uploadimages() you need to remove the lines 1665+1666:

if (!pnSecConfirmAuthKey())
return photoshareErrorUser(_PSBADAUTHKEY);

Hi,



I'm a newcomer with the same problem as described above. When i removed the lines you mentioned here, i no longer got the "wrong authentication", but now i recive:

Warning: Cannot use a scalar value as an array in /www/html/modules/photoshare/pnuser.php on line 1738

Warning: Cannot add header information - headers already sent by (output started at /www/html/modules/photoshare/pnuser.php:1738) in /www/html/includes/pnHTML.php on line 334

Also, no pictures is uploaded. Everything else works great ;) And i really, really would like to make this software work, it is just what I've been looking for. We now use Magnish, but a system which let my members upload pictures is fifty time better.

Hope you can help!

Best regards, Terje Dahl - Norway
http://www.hestivestby.no/