Upload from users hang

[creps031]

Hi,

we encounter a problem when connected user want to upload photo
they have button, they can add the photos, but when they hit "upload" , the progression bar does'nt move an inch
photos are not uploaded
no error in apache log , no apache log at all (even in access.log)
user can't abort the upload
url : /index.php?/add_photos

[Piwigo]12.2.0
Système d'exploitation: Linux
PHP: 7.3.31-1~deb10u1
MySQL: 5.5.5-10.3.34-MariaDB-0+deb10u1
Bibliothèque graphique: External ImageMagick 6.9.10-23

Thx a lot

Regards

[ulmer-a]

I have the exact same issue with Piwigo 12.2.0 and PHP 7.2 ...

[ulmer-a]

Solved it by disabling ModSecurity rules 241783 and/or 244780 (I just disabled both, maybe only one of them is sufficient), so at least from my perspective doesn't seem to be related to the community plugin.

[creps031]

Hi ulmer-a , can u be more "precise" ?
i have'nt enable modsecurity with my apache setup (internal server only)

may be can u share me your apache configuration ? (which seems to be hardened)

thx

Regards

[ulmer-a]

Unfortunately the webhoster I'm using doesn't allow me to view the exact apache configuration. I can only disable certain modsecurity rules that have recently fired, and that's what I did here. For what it's worth, here's my piwigo config:

Piwigo 12.2.0
OS: Linux
PHP: 7.2.34-28+ubuntu20.04.1+deb.sury.org+1
MySQL: 5.7.38-0ubuntu0.18.04.1
Graphics: ImageMagick 6.9.10-23

If you really didn't even enable modsecurity then there really seems to be some other problem... Maybe your PHP upload limit is too low or something similar? Otherwise, it might indeed be a problem with the community plugin.

[nicopere]

Same problem here and I do think it's a Community issue because admin upload still works fine at my webhoster's.

[creps031]

Hi Nicopere,

i have found the problem (for my case)
it's mixed content , http/https
because my piwigo is "behind" a reverse proxy
since i go all SSL , all work fine now

you should/could view with chrome debug console if you're in the same situation

Regards

[nicopere]

thanks creps031 for your quick answer
indeed I have seen the "mixed active content" error in the Firefox console
now I don't know what to do next... how do you "go all SSL"?

[creps031]

i make a redirect in my apache config to force SSL to all content

RewriteEngine on
RewriteCond %{SERVER_NAME} = yourserverdns
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]

the first time, with the mess, the redirect SSL was on reverse proxy , not on apache

Regards

[nicopere]

OK, I'll check that with the tech people at my (non-profit) webhoster... (tried to put that in a .htaccess, unsuccessfully)
However the http->https redirection seems to be working working finely there for all other purposes, ant it used to be working for the community plugin also.
So for now I will upload using the admin account.
Keep you posted. Thanks for your help.

[creps031]

Hi ;p

use chrome , CTRL+Shift+I => it will show you debug console
try to upload the file , you will see the error , may be more accurate to understand ;p
my reverse proxy always work , before this time ^^ maybe some tricks in code , but u can overlap

Regards

__