Weathermap 0.97b Released (security fixes, etc)

[JJX]

I am using Debian 6.0.7 , php 5.3.3-7 & cacti 0.8.7g
I face the same problems:

- Map editor is not working
- Maps are not updated
- When I refresh a current map I get the following errors in apache log:

[Mon Apr 08 11:35:33 2013] [error] [client 192.168.241.61] PHP Deprecated: Function ereg() is deprecated in /var/www/cacti/lib/html_validate.php on line 38
[Mon Apr 08 11:35:33 2013] [error] [client 192.168.241.61] PHP Deprecated: Function split() is deprecated in /var/www/cacti/lib/functions.php on line 1795
[Mon Apr 08 11:35:33 2013] [error] [client 192.168.241.61] PHP Deprecated: Function ereg() is deprecated in /var/www/cacti/lib/html_validate.php on line 38
[Mon Apr 08 11:35:33 2013] [error] [client 192.168.241.61] PHP Deprecated: Function split() is deprecated in /var/www/cacti/lib/functions.php on line 1795
[Mon Apr 08 11:35:33 2013] [error] [client 192.168.241.61] PHP Deprecated: Function session_unregister() is deprecated in /var/www/cacti/lib/functions.php on line 410
[Mon Apr 08 11:35:33 2013] [error] [client 192.168.241.61] PHP Deprecated: Function session_unregister() is deprecated in /var/www/cacti/lib/functions.php on line 410

I rollback to 0.97a and all problems solved

[jascott]

Has anyone managed to get weathermap 0.97b to download correctly? I am getting errors about the compression method with the files using windows native unzipper and 7Zip.

[Howie]

Looks like the zip has been mangled somehow. I'll check into it today.

You shouldn't need to remove anything before unzipping over the top. However, got this particular release, part of the changes was to move more 'non-page' PHP code into lib, so you'll end up with multiple copies of some files.

[Howie]

I've just put a 0.97c zip up on the website - there's one tiny code fix for the editor, but mainly it's in a fresh zip.

[JJX]

Still not working

Editor displays a white page. (after it was enabled)
Maps are not refreshed

[Howie]

And what do you see in the error log, JJX?

The other errors about deprecated functions are from Cacti itself, not Weathermap, by the way...

[Howie]

I've just noticed one difference between 0.97a and 0.97c is that 'c' has error_reporting set to a non-default value. Possibly this is why you are seeing those deprecation warnings too.

Try commenting out the

Code: Select all

   error_reporting (E_ALL);

on line 32 of lib/Weathermap.class.php

If you are getting some extra warnings during the image generation, it will break the PNG file, too. (there would be text at the front of the .png file)

[JJX]

I have comment out that line.
When I open editor I get a white page and this error:

[Fri Apr 12 12:58:40 2013] [error] PHP Fatal error: Call to undefined function wm_module_checks() in /var/www/cacti/plugins/weathermap/editor.php on line 86, referer: http://cacti.mysite.com/plugins/weather ... n-mgmt.php

After deleting the old installation and using a clean copy of 0.97c it worked.
Some fine tuning with editor is required (to open the maps directly)

[JJX]

0.97c README has wrong version on first line -->

This is PHP Network Weathermap, version 0.97b by Howard Jones (howie@thingy.com)

[Howie]

Some fine tuning with editor is required (to open the maps directly)

I don't understand - what did you need to change?

[JJX]

Maps are not listed in editor.php

// sensible defaults
$mapdir='configs';
$cacti_base = '../../';
$cacti_url = '/';
$ignore_cacti=FALSE;
$configerror = '';

And all maps are in $cacti_path$/plugins/weathermap/configs, with 777 permissions

[Howie]

What are your map filenames like? Do they have a .conf extension?

[JJX]

All maps have a cfg extension

[Howie]

One of the security issues with the previous version was that it allowed an editor user to create .php files in the configs directory, and then serve them up. Part of the solution was simply to not allow the editor to deal with arbitrary filenames anymore. You would need to either rename the configs or search for the (few) places in the editor that mention "conf" - I think they are all in editor.inc.php

[JJX]

I renamed all maps to X.conf and apply new permissions.
Now everything seems to work

Thank you