Bug #21087
closed
If safe_mode is enabled, thumb generation fails for file with "&" in filename
0%
Description
When trying to view a thumb for a file with an ampersand in the filename, it shows the default "no thumb generated" image.
I appended a screenshot that shows this error in the DAM-Edit window.
I guess in t3lib/thumbs.php, wrapFileName() should escape the filename with escapeshellarg instead of just wrapping it with quotes.
[added by Olly]
Seems like this occurs in all TYPO3 versions
http://forge.typo3.org/repositories/revision/typo3v4-core/6258
http://forge.typo3.org/repositories/revision/typo3v4-core/6259
http://forge.typo3.org/repositories/revision/typo3v4-core/6260
(issue imported from #M11993)
Files
Updated by anselm over 14 years ago
Seems like this was fixed in the latest security release (10/22/2009).
Updated by Denis Rathig over 14 years ago
We face the same problem since update to 4.1.13 and 4.2.10 when uploading images to fileadmin via backend.
Updated by Oliver Hader over 14 years ago
Hi Denis,
do you use DAM? If so, please try without it and report whether the problem still exists without DAM. Thanks!
Updated by Denis Rathig over 14 years ago
Hi Oliver,
no we do not use DAM, just the normal fileadmin-upload.
We think it is a problem with the function escapeshellarg in 4.1.13. There are single quotes in the filename-wrap now. We have the problems on several servers even when using filenames with normal letters.
Updated by Oliver Hader over 14 years ago
Hi Denis,
can you tell me the distribution you are running your servers with (e.g. Debian Version x.y.z)?
Updated by Denis Rathig over 14 years ago
Hi Oliver,
we have the problems on
debian 4.0
and
SUSE LINUX 10.0 (i586) OSS
VERSION = 10.0
Both systems are fully updated with the current php-versions
Updated by Alexander Schwethelm over 14 years ago
We have that same problem since upgrading to version 4.2.10 of TYPO3.
The problem only exists if PHP safe mode is enabled. The problem is therefore best described by Morton Jonuschat in his problem report (ID 0012341).
Updated by Oliver Hader over 14 years ago
Another issue has been reported to be via e-mail concerning the image tests in the Install Tool:
The execution of the following command fails there:
/var/www/empty/gm convert -geometry 170x136! -colorspace RGB -quality 70 /var/www/virtual/xyz.de/htdocs/typo3/sysext/install/imgs/jesus.jpg\[0\] /var/www/virtual/xyz.de/htdocs/typo3temp/pics/install_read_jpg.jpg
However, I could not reproduce this withouth safe_mode enabled.
Updated by Staffan Ericsson over 14 years ago
Releated to http://bugs.typo3.org/view.php?id=12090 maybe ?
Updated by Chris topher almost 13 years ago
- Subject changed from Thumb generation fails for file with "&" in filename to If safe_mode is enabled, thumb generation fails for file with "&" in filename
- Target version deleted (
0)
Updated by Andreas Wolf over 12 years ago
- Category set to Backend User Interface
- Status changed from New to Needs Feedback
Is this problem still valid? Going to close this if there's no feedback within one week.
Updated by Alexander Opitz almost 11 years ago
- Status changed from Needs Feedback to Closed
No response after 1 year => closed.