OK, I have several Drupal sites running on one server which is running FreeBSD 4.10 stable, PHP 4.3.11 and MySQL 4.1.9.

On an existing 4.6.3 site (site 1), there are no problems of the kind I'm about to describe. This can be witnessed by visiting:

http://www.vcommunity.org.uk/system/files?file=pictures/picture-1.jpg

(apologies for the ugly mugshot - WHO is that guy!?!?!)

However, on a 4.7-beta-3 site (site 2) that I'm setting up, I have been receiving the following error:

Type - access denied
Location - /system/files?file=pictures/picture-1.jpg
Referrer - http://rutland.vcommunity.org.uk/user/1/edit
Message - system/files denied access.
Severity - warning

Visiting a similar URL for that site produces this:

http://www.v-community.co.uk/system/files?file=pictures/picture-1.jpg

I have tried to troubleshoot the error to no effect and finally decided to try a clean install to see if there were any problems. This I did on a subdomain, http://rutland.vcommunity.org.uk (site 3). Visiting the respective same URL produces this:

http://rutland.vcommunity.org.uk/system/files?file=pictures/picture-1.jpg

Which looks fine. Except that in the log files, I have the same error as on site 2:

Type - access denied
Location - /system/files?file=pictures/picture-1.jpg
Referrer - http://rutland.vcommunity.org.uk/user/1/edit
Message - system/files denied access.
Severity - warning

The error always appears twice for every instance:

warning	access denied	16 Jan 2006 - 1:57am	system/files denied access.
warning	access denied	16 Jan 2006 - 1:57am	system/files denied access.

And given that this is a clean install now and is running on a server which is known to work (site 1), I have to assume that there is a problem with beta-3.

Am I wrong? Can someone point me in the right direction if I am because I am completely flummoxed now.

Sorry if this isn't considered a bug report. I'll happily move it if so, but to me it seems the most logical place for it.

Regards

Patrick

Also, apologies for the many links shown here but a single screenshot will not make the problem clear.

CommentFileSizeAuthor
#2 Image1.jpg159.46 KBicenogle

Comments

icenogle’s picture

I am having similar problems, under similar circumstances.

  • I was running 4.6.5, and upgraded to 4.7.0-beta3
  • My content involves pages that have images wrapped by text.
  • I am getting error messages in the log trying to display those images.

    Here is the kind of thing I'm getting:

 access denied        Jan 19 2006 - 5:40pm            system/files denied access. 
 php                         Jan 19 2006 - 5:40pm           Cannot modify header information - headers already sent by (outp admin 

The second error message (which actually occurs first) is another piece of wierdness that may or may not relate to the other. I suspect it doesn't.

I have gotten some of the other error messages mentioned by the original submitter, but I have been messing with editing the text and the links and prevented some of the problems by modifying the url's on the images. (I suspect I shouldn't have to.)

I have been re-visiting this bug report to see what the response might be, and decided to confirm the bug, in case someone thought it was unique to the submitter.

icenogle’s picture

StatusFileSize
new159.46 KB

As I now look at it, it does appear that the two error messages are related. drupal_access_denied() has been modified for 4.7 to unconditionally print(theme(page,...)), and it looks as though recursion is happening here. (If I click on the "view" link in the access denied error message, I get a recursive print of the page, apparently til the stack blows.)

So there's a problem with image access, and there's a problem with drupal_access_denied(), if I'm not mistaken.

I have attached a screenshot of the way this display looks.

I'll check to see if another bug needs to be filed on this.

icenogle’s picture

I have gotten rid of my problems (note: I'm not the original submitter) by carefully re-installing and re-patching image, img_assist, and tinyMCE.

I haven't tried to make uploads private again. I note in the settings help text that it isn't advised to switch back and forth, so I suppose they shall forever remain public, at this point.

I believe that if you do get a "denied access" message, you will get a cascading theme page, and that that probably is because of a bug in the re-implementation of the drupal access denied function.

Patrick Nelson’s picture

I too have gotten rid of the problems by doing a completely new install and not enabling upload module at all but allowing the upload of user pictures.

This therefore is definitely not fixed, but at least it means the problem is narrowed to uploading files, i.e., the upload module (IMO).

moshe weitzman’s picture

i think a patch went in to fix this. can someone please try to reproduce this using HEAD drupal? thanks.

tangent’s picture

Category: bug » support

Per comment #3 this issue seems to be caused by contributed modules exclusively. I'm setting this to support status.

If the OP still thinks this is a core bug then please submit steps to reproduce the bug.

Patrick Nelson’s picture

No, I have a fresh install of 4.7-CVS and no problems. I reckon this WAS caused by contrib. modules but I am not able to say which ones at present. Will still be using all modules that I had installed at that time although not all are currently enabled, so I will keep an eye out for this problem as I carry on building the site and will report the error and reproduce path if it reoccurs.

killes@www.drop.org’s picture

Version: 4.7.0-beta3 » 4.7.0
Status: Active » Fixed

apparently fixed.

mjolley@buy-hot.com’s picture

I fixed this by setting global read access to the "files" directory. Probably not the ultimate solution, but I don't currently have any files that need read protection.

Anonymous’s picture

Status: Fixed » Closed (fixed)