IMPORTANT: Uncontrollable removal of images/files on server | Bugs & Solution

Printable View

April 12, 2019, 10:03 AM
Curtis

IMPORTANT: Uncontrollable removal of images/files on server | Bugs & Solution

Some of our customers faced up a problem that was caused by a bug in the system.
The bug resulted in uncontrollable removal of photos, videos and other files from the file directory.

The problem has been detected in Flynax 4.7.0 and 4.7.1 versions only.
The bug was triggered when a user removed a listing that had a Youtube video uploaded first.
We've fixed it and applied the fix (see below) to all our products in the Customer Area (both to software and patches).

To avoid losing data on your website we suggest that you apply the fix immediately.

1. If you run Flynax 4.7.0 do the following:

Open file /includes/classes/rlListings.class.php and following code ~1978 line

PHP Code:

Only registered members can view the code.

Replace it with the following code:

PHP Code:

Only registered members can view the code.

2. If you run Flynax 4.7.1 do the following:

Open file /includes/classes/rlListings.class.php and following code ~2149 line

PHP Code:

Only registered members can view the code.

Replace it with the following code:

PHP Code:

Only registered members can view the code.

P.S. We apologize to our all customers for the inconvenience and especially to those, who faced the issue on their sites.
April 12, 2019, 10:53 AM
Wei Hong

Thank you so much for the update. I'm applying it asap
April 12, 2019, 01:01 PM
Pete Young

As quick as we are to say how slow or bad customer service is, it is just as important to say thank you for the prompt and great support. good to see.
April 12, 2019, 01:17 PM
Ionut Barabasa

Deleted all my 10 gb of photos Only backup i had was from 2 months before. :)
April 12, 2019, 05:03 PM
Jason Barbour

Great stuff. Thanks!
April 12, 2019, 05:06 PM
John

Hello Guys, glad to help.
April 20, 2019, 05:29 AM
Ivan Amador

Thanks Curtis and John! Already fixed in my site :)
August 6, 2019, 02:22 PM
J Koresh

I followed the procedure " Open file /includes/classes/rlListings.class.php and following code ~2149 line: but not sure why the CodeLines are not numbered. Could it be cause of the browser Firefox?. Scrolled back and forth couple of times and still in the loop. Flynax, should I open a ticket?.

Any help please. Using 4.7.1

Thanks.
August 7, 2019, 05:41 AM
Rudi

Quote:

Originally Posted by Javed Qureshi

I followed the procedure " Open file /includes/classes/rlListings.class.php and following code ~2149 line: but not sure why the CodeLines are not numbered. Could it be cause of the browser Firefox?. Scrolled back and forth couple of times and still in the loop.

Use some code editor like notepad or sublime to see the line numbers

or create a ticket and we'll help you
August 7, 2019, 09:56 PM
J Koresh

Rudi,
I can create a ticket and PM you the ticket number if you can help.
August 24, 2019, 07:06 PM
Errol

Why not sent this as email to clients. I lost all my files :(
October 6, 2019, 06:09 PM
QuickRon

Hey Guys.
I already had this "fix" applied to my version 4.7.1 ... and today I lost ALL my listing images!! I have a support ticket in on this but I think it's important to mention it here in the forum so others are aware of this. Hopefully, Flynax will permanently fix this serious flaw.

Thankfully, I was able to do a full restore from my cPanel and get everything back, but I could have done without all the added STRESS!!!

And I agree with Errol .... I think Flynax should send an email blast to all customers notifying them of something as serious as this issue. I'm sure that I'm not the only one who had no idea that this thread (and issue!!) even existed on the forum.
October 6, 2019, 08:09 PM
Jose luis Lau cruz

What do you mean? What's going on?
October 6, 2019, 08:13 PM
Jose luis Lau cruz

For some reason, one of my categories lost it formatted forms
October 8, 2019, 03:04 PM
Errol

I agree with QuickRon

"I already had this "fix" applied to my version 4.7.1 ... and today I lost ALL my listing images!!"

I lost my files again ..
October 8, 2019, 06:15 PM
Rudi

Quote:

Originally Posted by Errol

I agree with QuickRon

"I already had this "fix" applied to my version 4.7.1 ... and today I lost ALL my listing images!!"

I lost my files again ..

Give me some steps what you did before the images were completely removed ?
October 8, 2019, 08:20 PM
QuickRon

UPDATE: I lost all the folders & files (ie images) in the "files" directory again yesterday (Oct 7th). Twice in 2 days.

Rudi and Flynax are aware of it.

Thankfully, I manually backed up the "files" folder on Oct 6th after the first occurrence, so I quickly restored those files.

The only things that I did in the admin yesterday was to switch the Email settings from phpmail to smtp. I also created a test account and then deleted it later.

BUT before I restored the folders, I noticed something strange. ALL the folders in the "files" directory were gone EXCEPT for the "qrcode" folder. And there was a huge discrepancy between the contents of the "qrcode" folder on the server and the one in my backup. There were much fewer folders in the "qrcode" folder on the server. AND the timestamp of those folders all had the same time which was around the time that I lost all the image files. That seemed really odd to me.

So, I uninstalled the QR Code plugin. And, so far, all the files are still there.

But then again, I haven't done anything else on the site since then.

I do not know if there's any correlation between the QR Code plugin and this issue of deleted image files. Or why this issue is suddenly occurring. Until now, I was thinking that it may be related to the cron, because I had other issues with the cron that were recently fixed by Flynax, and then after that is when I lost all the images.

I'm going to do some more testing and see if this event occurs again.
October 11, 2019, 04:13 PM
Errol

I think one step I did was to go to -> My Lisings > Edit active listings with photo > Then delete a photo

I won't confirm this for you as I am afraid I may lose images again. However I think this is where bug is at
October 12, 2019, 02:21 PM
Rudi

Quote:

Originally Posted by Errol

I think one step I did was to go to -> My Lisings > Edit active listings with photo > Then delete a photo

I won't confirm this for you as I am afraid I may lose images again. However I think this is where bug is at

I think you'd better create a ticket to investigate the problem on your site as removing some photo from listing works properly on our end

also check that the file ListingMedia.php from includes > utils is up to date
August 19, 2020, 09:30 AM
Curtis

Hello there,

I've found other one problem which also can remove all files/folders in the "files" directory.
It's actual for users who have software which was upgraded from 4.6.0 (or older) to 4.8.0 and newer.
Scenario of reproducing the problem:
- install Flynax 4.6.0 version or older
- create 2 accounts "test1" and "test2"
- import or create listings with images and assign them to "test1" account
- upload a thumbnail for user "test2"
- upgrade the software to latest version
- go to AP and remove account "test2"

After this operation system will tried to remove account thumbnail, but it have wrong old format.
Now we've added the condition which will prevent all similar problems and removing data from webserver.

1. Please find and open following file: includes/classes/admin/rlAdmin.class.php
Find following code:

Code:

Only registered members can view the code.

And replace it to follow:

Code:

Only registered members can view the code.

2. Find and open file: includes/classes/reefless.class.php

Find following function deleteDirectory()

Code:

Only registered members can view the code.

And replace to follow:

Code:

Only registered members can view the code.
August 19, 2020, 10:17 AM
Bahram Soltanirad

So, Curtis... do we need to update 4.7.x ?
August 21, 2020, 08:48 AM
Curtis

Quote:

Originally Posted by Bahram Soltanirad

So, Curtis... do we need to update 4.7.x ?

This issue can be exist in websites which used old version (4.3.x or 4.4.x or 4.5.x) and after they have been updated to 4.6.x and higher.
March 29, 2021, 07:20 PM
Robert Engelke

Just had this happen to our site, the first fix posted was already in place. haven't added the second fix though. any info on if that is the only thing needed to fix it?