Support community for TTG plugins and products.
NOTICE
The Turning Gate's Community has moved to a new home, at https://discourse.theturninggate.net.
This forum is now closed, and exists here as a read-only archive.
You are not logged in.
I've been having some dialogue with Ben regarding an error 404 I was getting on trying to check inside the master.sq3 databases after I had had some funny goings on in a new hosting environment.
After hours of trying to establish the cause, I eventually had a shared desktop session with tech support at the new host. What we established was that modesurity was interpreting the access to the databases as a breach, and after a few attempts went straight to a block on my domain IP address. The relevant error is reproduced here, courtesy of the host tech support.
OWASP ModSecurity Core Rule Set V3.0
SpiderLabs OWASP curated ModSecurity rule set
930100
#
# -=[ Directory Traversal Attacks ]=-
#
# Ref: https://github.com/wireghoul/dotdotpwn
#
# [ Encoded /../ Payloads ]
#
SecRule REQUEST_URI_RAW|REQUEST_BODY|REQUEST_HEADERS|!REQUEST_HEADERS:Referer|XML:/* "(?i)(?:\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8|e)0%80%ae|2(?:(?:5(?:c0%25a|2))?e|%45)|u(?:(?:002|ff0)e|2024)|%32(?:%(?:%6|4)5|E)|c0(?:%[256aef]e|\.))|\.(?:%0[01]|\?)?|\?\.?|0x2e){2}(?:\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\/))" "phase:request, msg:'Path Traversal Attack (/../)', id:930100, ver:'OWASP_CRS/3.0.0', rev:'3', maturity:'9', accuracy:'7', t:none, block, severity:CRITICAL, logdata:'Matched Data: %{TX.0} found within %{MATCHED_VAR_NAME}: %{MATCHED_VAR}', capture, tag:'application-multi', tag:'language-multi', tag:'platform-multi', tag:'attack-lfi', tag:'OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL', setvar:'tx.msg=%{rule.msg}', setvar:tx.anomaly_score=+%{tx.critical_anomaly_score}, setvar:tx.lfi_score=+%{tx.critical_anomaly_score}, setvar:'tx.%{rule.id}-OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL-%{matched_var_name}=%{matched_var}'"
Turning off modsecurity is not an option. I've posted this here for both Ben and Matt to pick up. I've emailed Ben direct. It would seem that the path is an issue, but this stuff is way way above my head.
Hopefully the TTG wizards can find a workaround.
I've just pressed that link and the missing files from the root of galleries have been created and yes galleries is shown as top level. I'll go back into LR and move a few around now, as there is an orphan in my Edgelands gallery. I'll recreate some I deleted to see what happens.
Thanks for the prompt. I've been at this machine since 0442 this morning so a little jaded now but I can recommend Cloud-Tree here in the UK. They have given first class support all over the weekend as they help 1400 customers seek refuge with a new hosting company, and I have a full bag of tools to help me manage without waiting for 24 hours as with the previous hosting company.
Thanks Rod,
None of those actually so I'm not sure what happened there as i did a fresh install and used my data and custom folders from the old host.
Given their names I suspect they are critical!
I've spent 40 hours at the machine over this holiday weekend as the migration has taken place! My eyes are a tad tired now but luckily the weather has been atrocious so this stuff has kept me in the warm at least.
This is bound to be something simple.
I have been forced to change hosting services over the weekend and I have had a few twitches to sort out and Ben has helped tremendously in fixing .htaccess & phplugins issues plus noting that I had not uploaded all the content for my blog so all those bits are sorted, including the https stuff. It is bed time in Oz at the moment
The problem I'm having is with the galleries menu. It seems corrupted but I may be the corruptor. If you click on Galleries it presents an Index of page. I republished everything yesterday having deleted it via Publisher in Backlight thinking that it what I should do having moved hosts. I'm sure I've seen this Index listing before but that was way back in CEn days.
As always, grateful for any pointers. At least I have a green padlock now and for the first time in ever I now have access to cPanel so that was a new experience for me.
www.tjowens.com should display the error.
I've just been in checking my settings and all is working fine and I'm using default settings out of the box
Hi Bret
I'll check my settings later. Unable to do so at present but my site is returning results from both Blog and Albums.
Regards
I've tried the sardine festival on iMAC and iPad 3. Black screen on the iPad with menus in blue text on white when clicking a blue hamburger. Tapping Galleries gives me a grey and green page with the sardine gallery clickable/tappable the black screen and blue menus with no results. It is a huge list of galleries that stutters as one scrolls on the iPad. Hope that helps in some way. Something looks broken on both desktop and iPad displays.
Thanks for the very useful advice Matthew.
I have implemented your idea of launching the iframe into a Fancyox via a button. It all looks OK on a desktop and iPad and if accessed via the button from the page on an iPhone it drops into their mobile site.
The Fancybox on desktop and iPad makes it look as if it belongs to my site even though the font is not the same. I'm not sure most people would quibble if they were interested in buying a print.
I can live with that for the moment.
Thanks again for your help and for letting me take part in Beta testing earlier in the year. I hope you and Ben have as relaxing a Christmas as you want and thanks also to Rod and everyone else who has chipped in to help out.
Thanks Matthew,
I'll get to play around with it a bit more today, and experiment with your suggestions.
Thanks Rod,
I'll take a look.
Good evening Backlighters,
Is anyone in the UK using Metro's services by sticking there iframe code into a page on your site?
I have looked at other iframe topics on the forum and can see that Matthew does not like them and I have found that to be a common response having Googled the topic. Notwithstanding the reasons for not using one, I am looking at trying to insert a new page on my site to sell prints but via Metro so all orders and payments are taken by them and all I'm doing is opening a hole for data to fall through.
http://tomowens.openpoint.co.uk/?page=printsales is what the test page looks like. It does not look responsive for all devices but if accessed from a mobile phone it redirects to their phone version. Desktop and tablet look OK when resizing on a desktop.
There are two design pages, basic and advanced. Obviously it is their styling coming through based on minor edits that one can do to the various colour options. This may sound like a dumb question but on their advanced design tab, there is a custom css bit. Should I be copying something from my site and pasting it here to pick up my fonts choices. I use Raleway and declare that in Backlight. If I stick Raleway in the font option a substitiute serif font is used.
Having the lab process the orders, print and take money is obviously an easy business option for me.
Anyone can set up an account https://metroonline.co.uk/admin/index.php
I've not uploaded print files to them yet so no orders would be placed if you tried to buy anything (I think) as yet.
Grateful for any pointers.
Brilliant implementation
One of the great new tools in 1.2.2 is the search tool that can search albums and the blog.
When I was using the default search widget in WordPress, the search did not return tagged content. I discovered that this was by design in the WP widget so I installed a plug-in 'Relevanssi' that works like a dream with the 1.2.2 search tool. It pulls back content and highlights text strings in the blog posts. This plug-in will search topic tags and content and comes with all manner of parameters that can be set.
As is my want, I am leaving most at default settings and it works me.
I'd just like to say a big thank you for this release. For me, a non-developer, it works and obviously works better for all the help you give me.
http://tomowens.openpoint.co.uk/blog/?p=2783
Fresh and very clean layout.
Hi Rod,
Many thanks.
I tried that and got huge font the same colour as the background so did this;
li.backlight_logomark p {
color: white;
font-size: .5em;
}
#page__body .backlight_logomark {
float: left;
}
#page__body .backlight_logomark p span {
display: block;
font-size: 0.5rem;
font-weight: 400;
line-height: 18px;
}
#page__body .backlight_logomark p span:nth-child(2n) {
font-size: 1rem;
}
I then altered the phplugins to
<div class="col_3 alpha">
<li class="logomark clearfix backlight_logomark">
<a href="http://theturninggate.net">
<ul>
<li style="opacity:.85; top:75%; left:75%;"></li>
<li style="opacity:.40; top:75%; left:50%;"></li>
<li style="opacity:.40; top:50%; left:75%;"></li>
<li style="opacity:.55; top:75%; left:25%;"></li>
<li style="opacity:.55; top:25%; left:75%;"></li>
<li style="opacity:.55; top:50%; left:50%;"></li>
<li style="opacity:.70; top:50%; left:25%;"></li>
<li style="opacity:.70; top:75%; left: 0%;"></li>
<li style="opacity:.70; top:25%; left:50%;"></li>
<li style="opacity:.70; top: 0%; left:75%;"></li>
<li style="opacity:.85; top:50%; left: 0%;"></li>
<li style="opacity:.85; top: 0%; left:50%;"></li>
<li style="opacity:.98; top: 0%; left: 0%; width: 50%; height: 50%"></li>
</ul>
</a>
</li>
<p><span>Built with</span>
<span>Backlight</span></p>
</div>
and now get a neat result displaying font the same size as the rest of the footer but only on one line.
It seemed like a good idea to use your guidance notes on grids as so much more control could be place on the content in the footer area.
Thanks again for your help.
Hi Rod,
I can see that there are a load of items inside a ul. I copied that into my phplugins file. I put that in a column alone as I could not find a way of controlling the h1 text that was there originally. When I put a <p> bit of content with it the text always sat under the logo. This was my attempt to get around that and a bit of a cludge.
I've had a go and messed about with the grid in the custom footer in the phplugins file. This is better but not perfect. I can live with it but if I could make the logo align next to the text that would be good but from what I have been reading up on today I would have to place the logo in a span to make that work and demands an image source from what I can see and and I'm not sure what the file is or where it resides.
Thanks
I still have a way to go with CSS as I don't do it all the time. I ought to set myself some tasks. I did buy the Missing Manual you recommend and did every exercise in the book then thought it would stick but the day job got in the way as always.
I only got my head around the grid this morning after a number of reads through. I blame my previous attempts at too late in the day when my eyes and head are a tad tired.
Always grateful for your tips and help.
Thanks Rod,
Never thought to check for font colour as my stuff was coming out white!
I'll fiddle about to get the font smaller as it looks a tad large at present.
OK chaps,
I know my limitations and I think I'm at a point that I ought not to interfere with;
I have used Backlight for my top level domain and unlike my photography sub-site where I use the Footer/Bottom pallet/Copyright turned on, I use a custom footer to display certain legal stuff for the parent company.
I really like the Backlight logo and it fits my colour scheme. I've added the logo into my grid by copying code from the sub-site to this one but I cannot display 'Built with Backlight'.
I can see when I inspect my photography site that there is a shed load of TTG CSS stuff associated with the logomark. That is a big red light for me.
I expect I should be stuffing something into my custom CSS file.
Any pointers gratefully accepted.
The parent site is www.openpoint.co.uk
Thanks
Hi Nico,
Rod updated his Tips & Tricks page. See this on styling your popup boxes: http://ttg-tips-and-tricks.barbeephoto. … pup-boxes/
It works OK for me.
I've given it a quick go on the road and it works a treat Rod. I'll tidy things up a bit when I get back but thanks again. A very good tutorial for a numpty like me.
Many thanks Rod,
You have saved me hours of extra work. I had started doing some stuff but moving the bar up to the top is exactly what I was after. I'll get a proper chance to do something over the weekend but will try something on the fly tonight if I can as I'm travelling.
Thanks Matt