Elgg 1.7.3 security release
By Brett
Elgg 1.7.3 has been released and addresses a security vulnerability. Users are encouraged to upgrade immediately. Visit the blog for more information.
This discussion is closed.
This discussion is closed and is not accepting new comments.
Feedback and Planning
Discussions about the past, present, and future of Elgg and this community site.
To replace is as easy as changing the name to .htaccess from .htaccess_dist?? So delete .htaccess first, the change the name of the other??
The command on a linux machine is: cp htaccess_dist .htaccess
Basically, delete .htaccess, make a copy of htaccess_dist, name the copy .htaccess.
Note that htaccess_dist does not have a "." before it whereas .htaccess does.
Everything seems fine, thanks Evan. Any idea why Vazco URL is not renaming profiles anymore from
/pg/profile/TahoeBilly to just /TahoeBilly . What would cause this to not work, something in 1.7.3 or just lost settings/saved in Vazco URL?
Well I made a mistake in the upgrade...idiot..put the files below each directory instead of in public HTML and Mod. I forgot, hadn''t done this awhile. I reloaded everything correctly, did the htaccess_dist change and the site loaded...with no icons..and then now I get elgg blue screen and this-
Unknown column 'e.admin' in 'where clause'
QUERY: SELECT * FROM elgg_users_entity as e
WHERE (
e.guid = 24
AND e.admin = 'yes'
)
That means the upgrade script wasn't run
As Cash said, this indicates your database has not been upgraded. I'd recommend reinstalling the code from scratch, then run yoursite.com/upgrade.php. You do not have to drop your database or data directory to do this.
Okay Evan that makes sense.
Cash or Evan, is there any last thing to try before I dump the site and start over? I get my front page (with no profile photos) then I can get to the login screen and then the site breaks and then I finally get elgg screen-
DatabaseException
Unknown column 'e.admin' in 'where clause'
QUERY: SELECT * FROM elgg_users_entity as e
WHERE (
e.guid = 24
AND e.admin = 'yes'
)
Cash when you say it hasn't upgraded, is that as simple as getting the upgrade.php script to run? Again any last ideas?
I just ran www.mysite.com/upgrade/php and I got the same error but my url in my browser went to this
http://mypaintersplace.com/upgrade.php?upgrade=upgrade
is there something keeping you from following the instructions on that page? You should follow those instructions and continue.