Hello
When I try to edit a user I just get a screen saying Loading with edit user in top left corner
Piwigo 2.9.4
Operating system: Linux
PHP: 7.2.10-0ubuntu0.18.04.1 (Show info) [2019-02-11 16:36:01]
MySQL: 5.7.25-0ubuntu0.18.04.2 [2019-02-11 16:36:01]
Graphics Library: ImageMagick 6.9.7-4
Keith
Offline
Does your server set the Content-Security-Policy header? If so, you need to add at least script-src 'unsafe-eval'. As other places also need inline, it probably should be script-src 'self' 'unsafe-inline' 'unsafe-eval' at the end.
Offline
In what file or config would that be set
keith
Offline
It's either in the Apache httpd.conf, or for Nginx a server{} block, or an .htaccess file. But if you don't know that then you probably also didn't add the header there ;-)
Anyway, you can find out whether the header is sent or not and what it contains using
curl -sviI https://YourDomain
Note that the output is different between http and https and the last character of the options is a capital I (i) not l (L).
Last edited by erAck (2019-02-13 10:53:37)
Offline
I appreciate the help, not sure that is the issue,this was working find until Saturday or Sunday, I suspect it is a plugin I used, I have now removed All plugins and it still does not work, just says loading, I can add users just can't edit there profile
Looks like user can edit their own profile just not the admin
Keith
Last edited by kdmiller45 (2019-02-13 13:15:33)
Offline
Well, try the curl command I gave or continue to poke about in a fog. If the curl output contains the Content-Security-Policy header and that does not list the mentioned script-src then that's very likely the cause. If there is no Content-Security-Policy header then it's something different. At least you'd know then.
Offline
Same question was asked again by same user in [Forum, topic 29192] Edit User and there was the Piwigo URL given, but since that is http only not https and the Content-Security-Policy header is not set my assumption does not hold.
So, something different.
Offline
Ok I host (on my server in the house) two website using Piwago
One vetiraq.com has the editing user profile issue where it just shows loading
the other ourlifeinpixs.com has no issues what so ever
I can add users no problem also
both hosted on same server have these versions install
•Piwigo 2.9.4
•Operating system: Linux
•PHP: 7.2.15-0ubuntu0.18.04.2 (Show info) [2019-04-01 17:51:42]
•MySQL: 5.7.25-0ubuntu0.18.04.2 [2019-04-01 16:51:42]
•Graphics Library: ImageMagick 6.9.7-4
so I'm sure its not the advice given
see the attached for the output of curl
Last edited by kdmiller45 (2019-04-03 01:04:33)
Offline
I'm also seeing this message in history
Notice: Undefined index: day in /var/www/vetiraq/admin/stats.php on line 294
Offline
Did you try disabling modsecurity like I suggested?
https://piwigo.org/forum/viewtopic.php? … 83#p172983
Offline
I hate to ask, but does it make any difference that I have another Piwigo site on this same server working fine and I have changed nothing since the two were installed
Offline
Any difference in their .htaccess files that could prevent execution of "unsafe" inline eval script?
Offline
I have attached the Curl results advised to do earlier
ourlifeinpixs site has no problems
vetiraq has the viewing user profiles issue
both hosted on same server installed same day
vetiraq worked fine until about two weeks ago now, maybe longer
Thanks for any help
Offline
Hi :-)
[Github] Piwigo issue #999
in the fex day a new release for this bug
Offline