I have an old test site that still runs Drupal 5.2 with Brilliant Gallery 5.x-1.x-dev modul.
I have shut it down now but I found many of these in the log file:

www.mytestsite.se/modules/brilliant_gallery/image.php?imgp=http%3A%2F%2F...

Error message:
Meddelande imagesy(): supplied argument is not a valid Image resource in /customers/educar.se/educar.se/httpd.www/modules/brilliant_gallery/image.php on line 82.

Some kind of exploit? Using the image.php file as some kind of proxy?

Comments

vacilando’s picture

vacilando commented
Status: Active » Fixed

Hi fuzzion - I had this problem before and solved it in image.php by exiting the script as soon as there is ':' in the path. This was insufficient because Windows servers use colon in paths, so I've today changed it to '://' which I think is an unmistakable signal of a link (is it?) If this string is detected, the script exists. Get the CVS or latest dev version that contains the fix. See http://drupal.org/node/186863#comment-752115

fuzzion’s picture

fuzzion commented

Fast and great response vacilando! Keep up the good work.
Regards, Johan

Anonymous’s picture

Anonymous (not verified) commented
Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.