Topic: md5_hex w/UBB error

[Pabuteo]

Hi,

Firstly may I say thank you very much for Album.pl. I have been searching for something of this sort that would do the job properly for a long time!!

I have installed all OK in the members area of www.BUAS.co.uk and everything (Password protection, Style sheet, Uploading, Authing, etc) apears OK.
However I am getting the error

"Could not import md5_hex. Continuing anyway..."

repeated twice at the bottom of the first screen. I have read the other (2) posts refering to this, but I am using UBB.
I am new to all  this and would appreciate a quick description of what this is refering to and what md5 is/does??


Thanks in advance,

Ian

[Mike Bobbitt]

Hi Pabuteo,

Glad you're enjoying the script!

The message indicates that the Perl MD5 package has not been installed. Just for fun, can you run album_test.pl, if you have it? (I just added it to the zip file yesterday, so you may not...) That'll tell you if you have Digest::MD5 installed, which is the package you need.

Alternatively, you can comment out the MD5 stuff in the "checkPassword" subroutine to get rid of the message... But then you lose the capability to handle encrypted passwords.

Hope that helps.

Cheers

[Pabuteo]

Hi,

I tried the album_test.pl and it passed the MD5 test but failed on the "DBI package" (!?)

I am using authentication=2, so I assume this is not a problem?

Could album_test.pl be wrong about the MD5 package? (It's running on my host's Unix server)
Also, if I disable this MD5 stuff, will I open the album up to hackers or isn't it really a problem?
(all photo's are in a directory protected with a .htaccess password protection)

Thanks again,

Ian

[Mike Bobbitt]

Hi Ian,

The DBI package is only required for authentication_type=4, so no need to worry about that. I added a bit to album.pl to (hopefully) show more about the problem, so if you want to re-download and replace album.pl, we might have a better idea of what's going on...

MD5 is used to protect the cookies and sometimes the stored passwords (in this case, UBB uses it to protect the cookies). So it doesn't do much to protect your site, it protects the user from having their password accidentally snarfed. .htaccess will definitely cover it off.

Cheers

[Pabuteo]

Cheers,

I'm not nearly cleaver enough to begin to understand what you did there. Needless to say, thank-you very much. I'm not getting any error messages any more.

Hell, even if it isn't fixed and is lying to me, at least I can live in blissfull ignorance!!  

Thanks again,

Ian

P.S.

Obviously this site (www.buas.co.uk) is protected, but I will soon be adding your album.pl to another of my sites (www.plymouth-links.co.uk). I'll let you know when it's there and being used so you can link to it if you wish.

Best of British!!!  

[Mike Bobbitt]

Great, glad it's working now, and please do let me know when your other site goes live!

[Pabuteo]

Hi again..

Sorry! I was wrong    - in fact the error is still apearing.
It only shows when logged in (any user). Which makes sense really!  


I tried #ing out all the "use Digest::MD5" lines in album.pl file but this just created more lines complaining that it wasn't happy!


Any further ideas - should I check with my ISP??

[Mike Bobbitt]

Ok, I've added some lines to the code, and you should delete everything between them. The look like this:

#### If you're having MD5 "include" problems, delete everything from this line to the line like it below. ####

[ A bunch of code]

#### If you're having MD5 "include" problems, delete everything from this line to the line like it above. ####

It's the heavy handed way to do it, but it should do the trick...

[Cina]

Hello !

I don't know if this is the proper place to post this,
I get this error messages when I enter the board.

Could not import md5_hex (Can't call method "new" on an undefined value at /usr/lib/perl5/site_perl/5.6.0/i386-linux/Digest.pm line 31. ). Continuing anyway...

I don't know what to do to get rid of it

* Cina

[Mike Bobbitt]

Hi Cina,

You should be able to edit album.pl, and simply delete all the lines between the markers I identified above.

Hope that helps.

Cheers

[Cina]

Thank's It worked great

[Leerch]

I really like your script also. I'm also having the same problem like them. All things checked out in the test. Then I deleted the lines in the album.pl file but now I'm having problems logging in. I would really appreciate your help

[Mike Bobbitt]

If everything checked out in test, you probably don't need to delete the lines (the packages are there).

With all lines present, what does the "output from album.pl" say in album_test.pl?

[LoonyPandora]

I'm having a similar problem. I got those error messages, but running album_test.pl it said I had it installed. using perldiver (another script for checking what I got installed) it also says I have it installed. The only thing I don't have installed is ImageMagick, but I've diabled all those options (on a side note, is there any plans to support other librarie than imageMagick?)

I commented out the lines relating to MD5 (well deleted between those lines like you said) and the error goes, but I still get an error when I try and upload. It's unable to authenticate my username. I'm using YaBB integration. the path is correct (I'm using absolute sever path /02505/htdocs/forum/Members for example) is that the right kind of thing to use?

I've had YaBB running for ages, and I had a previous version of Gallery running a while back, just to test it out. All the settings appear to be correct, I'm getting no warnings when I look at the settings page.

URL: http://www.vegetablerevolution.com
ALBUM: http://www.vegetablerevolution.com/gallery/album.pl

Any help would be appreciated

[Mike Bobbitt]

Hi there!

So when you *don't* delete the MD5 lines, what does album_test.pl show as output?

It's possible that you're missing only 1 or 2 parts of the MD5 package. By deleting the whole MD5 section, you solve the error, but break any kind of encrypted authentication (such as that commonly used by YaBB).

If you can get the output from album_test.pl, then we can figure out which specific section to comment out, instead of taking the brute force approach.

Cheers