Please upgrade here. These earlier versions are no longer being updated and have security issues.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
Options

[GitHub Bug #1609] I removed a plugin from the dashboard and all my plugins disappeared !

124

Answers

  • Options
    x00x00 MVP
    edited June 2013

    @vrijvlinder said:
    Something very odd here look at the permissions for the plugins, the only plugin with permissions is the one I just installed .

    they should all have 1492896 15010

    0 is usually the root user.

    If you set the folder to the web server user such as www-data, only ever give write permissions to web user where necessary. You should not assign the to that user or group at all unless there is specific cause such as conf, uploads, cache.

    Otherwise you should not use that user, and only expose those file through read permissions.

    grep is your friend.

  • Options
    vrijvlindervrijvlinder Papillon-Sauvage MVP

    @x00

    do you use any javascript minfier?

    No, I dislike those things

    this is why I disagree either touching the folders at all or attempting to set their permissions.

    I have not changed anything yet. Does 0 then mean that I am the root owner ?

    Why would only one plugin have my owner ID ?

  • Options

    I disagree that the core has RemoveFolder in the plugin manager.

    grep is your friend.

  • Options
    vrijvlindervrijvlinder Papillon-Sauvage MVP

    Here is a shot of a subdomain notice all the plugins have id like the one from my forum vrijvlinder.com

  • Options
    vrijvlindervrijvlinder Papillon-Sauvage MVP

    I disagree that the core has RemoveFolder in the plugin manager.

    Indeed why would there be an automatic function to delete an entire folder? I found RemovePlugin that means singular plugin not the plugin folder.

    I am trying to understand how removing one plugin from the dashboard could wipe out the entire folder. Specially since the plugin in question did not even have a cleanup function or a save to config or a remove all plugins function lol

    It is a real mystery. Now the mystery is how to get my plugins to have the same owner as I had before with the IDs which they used to have...

  • Options
    vrijvlindervrijvlinder Papillon-Sauvage MVP
    edited June 2013

    @peregrine @hgtonight @x00 @Shadowdare

    Ah!! well what do you know , thanks to the explanations about owner permissions etc you gave me,

    I was able to communicate precisely what was wrong and I just got a notice from the Host that they updated the permissions for my folders and now when I see my plugins in filezilla , they all have my owner ID instead of 00. Like the second screenshot I posted.

    Thank you all for helping me to know what to ask for from my host besides "now I can't delete folders..." :)

    The only mystery remains, is how on earth did the plugin folder get wiped ?!

  • Options

    your webhost, when they recovered the files they did so with root user, they did not reassign ownership.

    it is better if you can have ownership (your own user, or user that you manage). It is only files that need specifically to be managed by script, to be assigned to the webuser.

    Unfortunately with cheap hosts you do not have this under your control usually.

    grep is your friend.

  • Options
    vrijvlindervrijvlinder Papillon-Sauvage MVP

    Unfortunately with cheap hosts you do not have this under your control usually.

    They are not that cheap lol What bothers me is that I paid to get my plugins folder back and they should have restored it to how it was. Which was working super well except for the freakish wiping out of the plugins folder as I deleted one from the dashboard.

    I don't think that has to do with any permissions.I mean it show I had permissions to delete, but it does not explain why the entire folder was wiped out.

  • Options
    vrijvlindervrijvlinder Papillon-Sauvage MVP

    Yes I agree, if there is a bug the potential for disaster is waiting to happen.

    I think the removal from the dashboard must also clean up ? I mean even if the plugin does not have a removefromconfig , the plugin is removed from the enabled plugins list. But there is not other effect.

    If as you say something freakish like some runaway script can cause failure of the pluginmanager , it is better to not have that option. I do not trust the remove button anymore.....

  • Options

    I am trying to understand how removing one plugin from the dashboard could wipe out the entire folder.

    I would spend my time on other issues and don't look back. Since you say you don't have the option to remove anymore and you don't want to do it, don't worry It all could have been coincidental and not related.

    But I think this issue is now closed, unless you or someone replicates it and has the same result.

    I may not provide the completed solution you might desire, but I do try to provide honest suggestions to help you solve your issue.

  • Options
    vrijvlindervrijvlinder Papillon-Sauvage MVP
    edited June 2013

    don't look back

    Yes it is horrible to think of nearly had a coronary !

    Well they restored the permissions and the buttons to remove are back p, however I will not use them and delete form filezilla instead. safer that way....

    I regret asking this as a question... now any time any one answers I need to mark it accepted or rejected...

    You helped me a lot to understand this , thank you very much for that

  • Options
    peregrineperegrine MVP
    edited June 2013

    try changing the permissions on each specific plugin folder to 555 and you shouldn't see the remove option.

    I may not provide the completed solution you might desire, but I do try to provide honest suggestions to help you solve your issue.

  • Options
    peregrineperegrine MVP
    edited June 2013

    I regret asking this as a question... now any time any one answers I need to mark it accepted or rejected...

    lol rubbing it in.

    I've got one like that for feedback that wasn't a question on another plugin that isn't mine, that was posted in the question category. I never use the question category! anymore

    I may not provide the completed solution you might desire, but I do try to provide honest suggestions to help you solve your issue.

  • Options
    vrijvlindervrijvlinder Papillon-Sauvage MVP

    I never use the question category! anymore

    lol thanks for telling me now... hahaha yes it kind of is annoying no?

    I guess I have this to look forward to for perpetuity would be nice to be able to mark it via email they send to also notify by email , what a complete service, if the government could run like this forum there would be more progress ;)

  • Options

    Really I would check what user and group it was assigned in the first place, you don't want them to restore it so the web user is the one managing the files, that could put you in the exact same situation. This would be a a bad setup on their part.

    I rather suspect this was the case, given you set to 755.

    Ideally you would have a user and group such as vrijvlinder, which is not the web user. Only assign the web user to the specific folders that actually needs to be written to like cache, uploads, and conf (which you can be selective about the files).

    People don't realise that permissions apply to users, and groups, they just think the higher the number the more it works.

    grep is your friend.

  • Options
    vrijvlindervrijvlinder Papillon-Sauvage MVP

    The way it seems is the numbers on the right side on filezilla pic I posted. They are the same on all my subdomains. I assume that they (host) is user 00 since the plugin folder was fished out from the backup they keep . They just put the folder back but with their owner 00
    permissions.
    that would explain why I could not delete folders from the plugin folder.

    People don't realise that permissions apply to users, and groups, they just think the higher the number the more it works.

    well all they need to know is that 777 is opening the door to hacking by other users in the system.

  • Options
    peregrineperegrine MVP
    edited June 2013

    lets take this thread on a tangent :).

    tangent 1 - I was following this thread, and I failed to notice that @x00 filed a problem on github because you selected best answer. The best answer floated to the first page, my browser took me to the last page of comments. Thinking I was following a progression of recent comments by going to the last page. I never saw x00's comment because of the float and only looked at first page, after sequenatial comments didn't make sense (I hate the best comment floating to the top - did I say this before - especially in multipaged discussions that one is following.

    tangent 2 - this a can of worms. But V, didn't you say you couldn't enable plugins in the dashboard from vanilla 2.1 - I wonder if this is a permission problem based on your host setup and the folders and file permissions in your 2.1 setup.

    I may not provide the completed solution you might desire, but I do try to provide honest suggestions to help you solve your issue.

  • Options
    vrijvlindervrijvlinder Papillon-Sauvage MVP
    edited June 2013

    But V, didn't you say you couldn't enable plugins in the dashboard from vanilla 2.1

    yea but it got fixed by using a hack hgtonight came up with. Commenting the error fixed it.
    I think the only thing that is not working is fileupload.

    I truly never had problems like people here post often. Not being able to write on the config etc. There have been some issues but it was the server and not me.

    I never saw x00's comment because of the float and only looked at first page, after sequenatial comments didn't make sense (I hate the best comment floating to the top

    I know that sucks eggs, I tried putting best answer on all related answers so at least they would go up together.

    I am glad x00 made a report, It is something that needs to be looked at for sure. It is one thing to delete one plugin , but entirely another to wipe out the entire folder with one press of a button.

    The remove button should be renamed to implode button. and have red warning letters, and two confirm popups , are you sure? are you really sure?

    I have an idea!! why don't I just mark all the answers best answers that might restore the order

  • Options

    yea but it got fixed by using a hack hgtonight came up with. Commenting the error fixed it. I think the only thing that is not working is fileupload.

    do you know the link, I was trying to search for it, but was not successful.

    I may not provide the completed solution you might desire, but I do try to provide honest suggestions to help you solve your issue.

Sign In or Register to comment.