Weather Applet version 1.3

erwin

Weather module was not in the applets list, so I add it in the module table. Then, in config page this error appear and the config failed:
[quote:373nqkm9]Type: 256
Message: Invalid css specified: Applets_Weather/default.css
File: /home/tavi/domains/atena.tavibitservice.eu/public_html/atena/modules/Base/Theme/ThemeCommon_0.php
Line=223
error backtrace:
[PHP core called function]
function called: handle_epesi_error(256, "Invalid css specified: Applets_Weather/default.css", "/home/tavi/domains/atena.tavibitservice.eu/public_html/atena/modules/Base/Theme/ThemeCommon_0.php", 223, Array ("Applets_Weather", "default", true, null))

File: /home/tavi/domains/atena.tavibitservice.eu/public_html/atena/modules/Base/Theme/ThemeCommon_0.php
line 223
function called: trigger_error("Invalid css specified: Applets_Weather/default.css", 256)

File: /home/tavi/domains/atena.tavibitservice.eu/public_html/atena/modules/Applets/Weather/Weather_0.php
line 34
function called: load_css("Applets_Weather")

[PHP core called function]
function called: applet(Array ("http://weather.yahooapis.com/forecastrss", "19063", "f"), Array ("Weather", true, null, false, "body", Array (#0), Array (#0), Array (#0), "15"), "15")

File: /home/tavi/domains/atena.tavibitservice.eu/public_html/atena/include/module.php
line 793
function called: call_user_func_array(Array (Object (Applets_Weather), "applet"), Array (Array (#3), "Array (\"Weather\", true, null, false, \"body\", Array (#0), Array (#0), Array (#0), \"15\")", "15"))

File: /home/tavi/domains/atena.tavibitservice.eu/public_html/atena/modules/Base/Dashboard/Dashboard_0.php
line 184
function called: get_html_of_module(Object (Applets_Weather), Array (Array (#3), "\"Array (\\"Weather\\", true, null, false, \\"body\\", Array (#0), Array (#0), Array (#0), \\"15\\")\"", "15"), "applet")

File: /home/tavi/domains/atena.tavibitservice.eu/public_html/atena/modules/Base/Dashboard/Dashboard_0.php
line 121
function called: display_dashboard("1")

File: /home/tavi/domains/atena.tavibitservice.eu/public_html/atena/modules/Base/Dashboard/Dashboard_0.php
line 27
function called: dashboard()

[PHP core called function]
function called: body()

File: /home/tavi/domains/atena.tavibitservice.eu/public_html/atena/include/module.php
line 793
function called: call_user_func_array(Array (Object (Base_Dashboard), "body"), Array ())

File: /home/tavi/domains/atena.tavibitservice.eu/public_html/atena/include/module.php
line 713
function called: get_html_of_module(Object (Base_Dashboard), null, null)

File: /home/tavi/domains/atena.tavibitservice.eu/public_html/atena/modules/Base/Box/Box_0.php
line 145
function called: display_module("Object (Base_Dashboard)")

File: /home/tavi/domains/atena.tavibitservice.eu/public_html/atena/include/epesi.php
line 209
function called: body()

File: /home/tavi/domains/atena.tavibitservice.eu/public_html/atena/include/epesi.php
line 265
function called: go(Object (Base_Box))

File: /home/tavi/domains/atena.tavibitservice.eu/public_html/atena/process.php
line 32
function called: process("", "")
[/quote:373nqkm9]

ethnar

Hello,

Installing modules by adding entry in modules table can and will have consequences like this, sometimes perhaps even worse. I highly discourage installing modules that way.

To fix your installation, you can simply run the Update on Theme files from /admin/ panel (assuming you're using version 1.3) (go to http://yourepesi/admin).
For this particular module it's all you need to do to get it working.

Another matter is why the Weather applet. In simple setup, all these applets are under common optional component under EPESI Core. In advanced setup, you can find it in Applets/Weather. If you can't find the module in Advanced view try refreshing the modules cache. If the problem persists, please contact us.

Kind regards,
Arek

erwin

I think something is wrong at the modules level administration. The same error appear, I cannot rebuild the modules table. How can I restore the original status?

erwin

I do a fresh install after deleting everything. After I had set the user rights (777) to the epesi directory recursively its all working and OK, no error. I wonder if its not a security issue to let full access to the directory?

erwin

Why Weather applet? Cause I want to develop a similar applet to get currencies. I'm still newbie to linux, php, mysql so I want to start with simple applications to learn basic functions and OOP.

ethnar

Hello,

Whether 777 permissions are security risk or not - that's a fairly complex question to ask.

There are two major scenarios that come to my mind:
1. You have multi-user hosting set up, with people logging in through ssh/ftp to access their http folders and settings, or having their own http scripts
2. You are downloading extensions for EPESI from untrusted sources. Please note that this scenario is virtually the same as if you gave rwx access to http user alone (chmod 700)

And the risks:
1. It might be pretty serious. If these users have access through all the directories on the path to your www folder, they can access that www folder as well. They can change the code, view config.php, access the database. Basically - they can do with this installation everything that you could do, including deleting it completely (with the data).
If there's a folder on that path they don't have access to (like /var for instance), it's as if nothing was there for other users.
2. In this scenario, you're opening your installation to possible errors and/or malicious code that might be placed in the downloaded module, allowing it to write additional *.php files and execute the code with apache user privileges.
Truth to be told, it's not really a scenario you should be worried with, since downloading untrusted module in itself is a risk, as it can already contain all the malicious code.

There's not much to be worried in the end, for most admins.

Hope this answers your question,
Arek

erwin

I follow ajb recomandation gave here http://forum.epesibim.com/viewtopic.php?f=6&t=973
Thank you both!

Epesi ENS | Epesi Academy | epesi.cloud PaaS | GitHub

Help Me! | Download from SourceForge