Security update NextGEN Gallery V1.3.5

17Jul09

Since two years I fear this moment that I forgot to check proper my code in NGG, today I need to release the very first security update for a possible XSS vulnerability in NextGEN Gallery. Please update now to version 1.3.5 at wordpress.org or via the auto update routine.

Download NextGEN Gallery Version 1.3.5
Release @ wordpress.org

40 Responses to “Security update NextGEN Gallery V1.3.5”


  1. Gravatar Icon 1 Rajesh Posted July 17th, 2009 - 22:32

    Hi,
    After using auto-upgrade I got this error:
    Warning: nggLoader::require_once(/home/content/n/r/a/nrajesh/html/blog/wp-content/plugins/nextgen-gallery/lib/core.php) [function.nggLoader-require-once]: failed to open stream: No such file or directory in /home/content/n/r/a/nrajesh/html/blog/wp-content/plugins/nextgen-gallery/nggallery.php on line 229

    I was no longer able to access my blog (admin)!

    I removed and installed nextgen again and it worked. It could be due to some falut of WP auto-upgrade as I had a similar issue with some other plugin (I think it was GDStar Rating) before…

    Thanks,
    Rajesh

  2. Gravatar Icon 2 Pedro Velado Posted July 18th, 2009 - 00:59

    After upgrading, the darker screen stopped working, and it opens the image in the same windown instead, without functioning properly.
    Example: http://toyotaclubsv.com/?p=347

  3. Gravatar Icon 3 John Posted July 18th, 2009 - 07:21

    Hi!

    I just wanted to say, I’m deeply impressed by the quality of NGG.
    Thank you for providing this plugin!

    John

  4. Gravatar Icon 4 Meg Posted July 18th, 2009 - 07:49

    Keep up the good work! No problems with new version install.

    Many thanks!

  5. Gravatar Icon 5 mau Posted July 18th, 2009 - 10:29

    hi,
    there’s been some attacks? what conseguences?

  6. Gravatar Icon 6 mau Posted July 18th, 2009 - 10:31

    i’ve just upgrade to 1.3.5 version but my wordpress show again the message “a new version of nextgen gallery is available”..why?

  7. Gravatar Icon 7 alex.rabe Posted July 18th, 2009 - 11:17

    @Mau
    Clear the browser cache ?

  8. Gravatar Icon 8 masterkarp Posted July 18th, 2009 - 13:39

    Hi,
    Nextgen- Gallery is the best WordPress- Plugin ever, but since a few Days i have got trouble with the Album Managment. The Drag’n Drop Function didn’t work! The new Release ddidn’t solve the problem. What’s wromg???

  9. Gravatar Icon 9 masterkarp Posted July 18th, 2009 - 13:49

    Hello again,

    i solved the problem:

    Put “php_value memory_limit 128M” in your .htaccess and nextgen works pefect!!!

  10. Gravatar Icon 10 digitalpbk Posted July 18th, 2009 - 16:55

    Happy to see that you fixed the vulnerability :)

  11. Gravatar Icon 11 Omer Posted July 20th, 2009 - 20:39

    This is the best plugin for wordpress by a land slide. I just wish it worked better for google images, as I still only have 200 out of 12,000 UNIQUE images indexed by google =[.

  12. Gravatar Icon 12 Mark Douthwright Posted July 21st, 2009 - 02:16

    Awesome plugin! Never had a problem. Keep up the good work.

  13. Gravatar Icon 13 Ramona Posted July 21st, 2009 - 13:28

    I’ve installed ngg some hours ago. The Gallery don’t create thumbs automatically. This problem is discussed in serveral German forums.
    php_value memory_limit 128M in .htaccess doesn’t solve the problem.
    Any idea? I work with wp 2.8.1.

  14. Gravatar Icon 14 Stephen Turner Posted July 23rd, 2009 - 02:48

    I am also have a similar problem to the above user. I’ve used ngg for several months without problem, then just in the last week I’ve had the problem with thumbnail creation (a bad thing since my website is about photo galleries more than anything else).

    I posted this issue on the WordPress support area, but since the above user’s problem sounds similar, I thought I’d mention it here. I also changed the memory limit to 128M with no result.

  15. Gravatar Icon 15 Mit Posted July 23rd, 2009 - 10:59

    Hello,

    I am fairly new to the world of php. I have been trying to modify a wordpress theme which has got a picture associated with it. I am trying to change that picture to a slideshow using the NextGen gallery plugin.

    Attached herewith is the theme code and also the slidshow code.

    ID, ‘Image’, true) ) { ?>

    <a href="” title=”"><img src="ID, “Image”, true); ?>” title=”" alt=” ” align=”top” border=”0″ style=”padding: 0px; margin: 0px 0px 0px 0px;width: 412px; height: 232px;”/>

    <a href="” title=”"><img src="/images/default.gif” title=”" alt=”" align=”top” border=”0″ style=”padding: 0px; margin: 0px 0px 0px 0px;width: 412px; height: 232px;”/>

    Insted of the default.gif I wish a slideshow to be seen and the code I wanted to insert is “[slideshow id=1]“.

    Any help in how to modify this will be highly appreciated.

    Thanks in advance.

  16. Gravatar Icon 16 dee Posted July 23rd, 2009 - 18:16

    Hello Alex,

    I love your plugin for WP. How can I get the image to stay on the same page when it is clicked. It used to simply enlarge in the center of the page than it stopped working. I would love to be able to have this feature work on my blog. Please assist.

    Thank you,
    Dee

  17. Gravatar Icon 17 JimmyV Posted July 23rd, 2009 - 19:11

    Hi Alex,
    This looks like ane xcellent plug-in, but I keep getting this error:
    public_html/wp-mu/wp-content/blogs.dir/3/files/test-one-gallery contains no pictures

    at the end when I upload pictures. Any clues?

    Thanks in advance.

    Jim

  18. Gravatar Icon 18 AchimG Posted July 23rd, 2009 - 19:59

    After the update I cant upload zips or pics with capital letters or with the underline Sign into the name. could you help me ?

  19. Gravatar Icon 19 AchimG Posted July 23rd, 2009 - 20:03

    I Work with I work with wp 2.8.2

  20. Gravatar Icon 20 Anthony Bouch Posted July 24th, 2009 - 05:28

    Great plugin Alex – although I’m new to both WordPress and WordPress plugins. Can you tell me if your NextGen gallery plugin will work even if you are hosting your blog at WordPress.com? Or do you need to host your blog yourself?

  21. Gravatar Icon 21 Matthias M Posted July 24th, 2009 - 13:09

    hi, the plugin have a bug if have more then 250 gallerys i cant the album not cange wordpress dashbord not more working in 2.8.2 in wordpress 2.7.1 it works waht is the problem with ngg and wordpress 2.8.2 Plase help me!!!!

  22. Gravatar Icon 22 Ryan Posted July 24th, 2009 - 23:26

    Great plugin Alex! I do have a question I was hoping you or someone here could answer. I have Thickbox selected as my effect and it looks great except it seems to auto resize the full size picture in the thickbox popup. Is there a file I can edit or a setting I can choose that will make sure it loads the full size picture in the Thickbox effect?

  23. Gravatar Icon 23 alex.rabe Posted July 25th, 2009 - 18:00

    @all
    Please do not post any support question in the comment section, use the forums. Thanks !

  24. Gravatar Icon 24 Jon B Posted July 30th, 2009 - 12:34

    Hi,
    Can anyone shed some light as to why all of a sudden my drag and drop function has stopped me from adding galleries to new albums?? I can add galleries to alums with content but not new ones!

    Any help greatfully received.

  25. Gravatar Icon 25 alex.rabe Posted July 30th, 2009 - 12:36
  26. Gravatar Icon 26 Jon B Posted July 30th, 2009 - 13:00

    Thanks Alex,
    Will try this afternoon and let you know if it works!
    Thanks
    Jon.

  27. Gravatar Icon 27 Simmons Posted August 1st, 2009 - 10:32

    hello!
    your plugin is really clean and great!!
    but i’m trying to fix a little bug that could create difficulties to the webmaster. If i allow other user (for example in my case subscribers) to create gallery and manage them in edit gallery, the will be able to create page (also with no mother)!!! that’s a bad bug because usually they can’t even imagine to create a page…
    how could i fix it?
    thank you very much.

    Simmons

  28. Gravatar Icon 28 don Posted August 4th, 2009 - 21:11

    Hi Alex,
    I like your plugin but I just made mistake, I really need your help.
    Below I quote a warning from David Potter about the gallery name
    (link to his page : http://dpotter.net/Technical/2008/03/nextgen-gallery-review-image-management/)

    “Choose the name of your gallery very carefully as once it’s been created it is very difficult to change it. You’ll have to rename the folder on the server’s disk and then modify the gallery record in the database – not for the faint of heart. I’d like to see the plugin modified to support this feature from the admin UI.”

    Now I’ve got 2 similar button on homepage, how to delete them.
    I attach link to the picture here for reference

    http://i25.tinypic.com/2mfx30j.jpg

    My site is http://www.platinum-treasure.com/ (sorry it’s an adult site)
    How to remove these both button on my header menu. From the quote above it said that I have to rename the database, which folder anyway.
    I try to uninstall NextGEN, remove previous theme and then re upload the theme again but it still appear
    Thank You much.

  29. Gravatar Icon 29 Ak Posted August 6th, 2009 - 05:54

    Where do I define the imagerotator path?

    I go to the Options page and select the Slideshow tab but there isn’t anything in there. The other tabs have content but not the slideshow tab, which is where I’ve been told from the WP forum to do this, is empty. it only has a little icon in the area where I should be able to define the path

    Can you please tell me where to define the path to Imagerotator.swf or why my slideshow tab is empty, if that is where i am supposed to define it?

    I’m on WordPress 2.7

    thanks!

  30. Gravatar Icon 30 Marc Posted August 8th, 2009 - 15:45

    Hi,

    tankx for this plugin. Work great and ist the best to time.

    Greez

  31. Gravatar Icon 31 crz Posted August 11th, 2009 - 09:19

    I have a problem here … why is my gallery shown like this: http://i28.tinypic.com/2z4zevc.jpg How can I fix it?

  32. Gravatar Icon 32 senshi Posted August 29th, 2009 - 09:44

    Hi, I’m wondering still for some weekes that there is no neewsfeed at the Overview Page of NGG anymore.

    I get just the following message:
    Newsfeed could not be loaded. Check the front page to check for updates.

    I can’t tell you when it started. It must be after I restored my database or after installing a WordPress or NGG update. I’ve already posted this Problem at the NGG Forum, but there is still no response. I don’t really know if I’m the only one witch such a problem. But the newsfeed at the dashboard is working perfectly so I think it’s not because of the server.

    Did you deactivated your newsfeed or smth. alse?
    Sorry If I’m posting such a question as a comment. Perhaps It’s started after installing this last update, I’m not sure.

  33. Gravatar Icon 33 senshi Posted August 29th, 2009 - 09:46

    @crz
    Did you try another style? It seems like there is some code, like float:left; missing.

  34. Gravatar Icon 34 alex.rabe Posted August 29th, 2009 - 19:00

    @senshi
    I will fix that in the next update…

  35. Gravatar Icon 35 Bajazzo90 Posted September 11th, 2009 - 11:29

    Hallo Herr Rabe

    Könnten Sie nicht versuchen das die Version 1.3.5 auch mit der deutschen Version WP 2.8 DE funktioniert?
    Mit der Englischen geht es.
    Vielen Dank

  36. Gravatar Icon 36 Arteccentrix Posted September 22nd, 2009 - 00:56

    Hi Alex

    I just upgraded to 1.3.6 and it has broken the functionality with the simple wordpress shopping cart.

    Can I disable the plugin and just re-install the previous version or is this going to be more complicated than that?

  37. Gravatar Icon 37 Arteccentrix Posted September 22nd, 2009 - 01:13

    Sorry, I’ve fixed it, the upgrade had just deleted the wp-estore template, it’s all OK again now I’ve uploaded it again :-)

  38. Gravatar Icon 38 Salvatore Posted October 1st, 2009 - 09:18

    Hello Alex. i can’t see the image on my site.. i see only the tag like [ nggallery id = 16 ] in the post… i tryed to put the tag into visual or html tab, but is the same way… the strangest is that this problem happened now, i have see the picture on my post but not now.. you can see here : http://www.tutto-gossip.com/george-clooney-e-la-canalis-al-lido-di-venezia-ecco-le-foto.htm

  39. Gravatar Icon 39 Mylander Posted October 6th, 2009 - 19:08

    hey alex,

    i automatically updated my wordpress and nextgen plugin last week.

    1.
    suddenly my slideshow widget doesnt showup anymore at the sidebar.
    (i updated the location of imagerotator.swf – but it doesnt help!)

    2.
    also the flot = right tag doesnt work anymore. it worked always – the other float tags still work???

    3.
    the thickbox effect also always worked. suddenly not?! (opens image as url link in same page)

    you know what happend or how to repair this?
    i tried it already for houres…

Who's linking?

  1. 1 Security update NextGEN Gallery V1.3.5 at alex.rabe | How to Define Pingback on Oct 19th, 2009
    "[...] more here: Security update NextGEN Gallery V1.3.5 at alex.rabe AKPC_IDS += "189,";Popularity: unranked [...] "
Comments are currently closed.