HTML Logo by World Wide Web Consortium (www.w3.org). Click to learn more about our commitment to accessibility and standards.

Moving forward with Composr

ocPortal has been relaunched as Composr CMS, which is now in beta. ocPortal 9 will be superseded by Composr 10.

Head over to compo.sr for our new site, and to our migration roadmap. Existing ocPortal member accounts have been mirrored.


Error upgrading live site from v8 to v8.1

Login / Search

 [ Join | More ]
 Add topic 
Posted
Rating:
#86592 (In Topic #17704)
Avatar

Community saint

I ran the upgrader to update my live site from v8 to v8.1. I successfully transferred the files across but trying to do a file integrity scan or a database upgrade resulted in a "Forbidden" error.

I've restored back to v8 but would like to get this site updated.

Bob
Back to the top
 
Posted
Rating:
#86660
Avatar

Community saint

Well, I tried this a few more times today with no success. I run CloudFlare and I tried doing the update a total of 4 times – 2 with CloudFlare in development mode and 2 times with CloudFlare deactivated. None of these attempts worked. I am able to successfully transfer the files across and then I get a "Forbidden" error at http://DOMAIN/upgrader.php?type=integrity_scan. I manually checked the permissions on upgrader.php and there were set properly at 644. Since I am running on ocPortal's recommended hosting partner, eLief, I really would not expect any problems there.

I am exploring one thing that may be the issue. I had no issues when I upgraded my test site but I had had CloudFlare disabled for some time on the test site. I have kept CloudFlare disabled for my live site now and will try the upgrade again in the off chance that it is somehow related to DNS not having enough time to take CloudFlare out of the chain. This doesn't seem to be the case but it is all that I can think of to try.

One thing I can say is that my Installatron backup /restore got a good workout and I was down less than ten minutes for each attempt before having my site restored. You gotta love good backups. I am always anticipating the worse, so I also initially exported a copy of my database "just in case" but it was never needed.

If anyone (Jean?) has experience with upgrading and having CloudFlare issues, please let me know what you found.

Thanks for any help.

Bob
Back to the top
 
Posted
Rating:
#86665
Avatar

Community saint

I wish I could offer something positive about the with/without Cloudflare scenario, Bob, but I've had it deactivated for quite a while now. Since I started getting problems with a version 8-RCxxx update, in fact.

I think you may well be doing the right thing by waiting for the Cloudflare DNS redirect to be flushed from the DNS servers, but I am only guessing,

 :thumbs:

Take my advice. I'm not using it!

View my working ocPortal site (version 9.x.x) at Anglo-Indian Portal
Back to the top
 
Posted
Rating:
#86669
Avatar

Community saint

Yeah, I think that must be it, Fletch.

I hate being without it as my site is perceptibly slower and it also typically catches between 5 and 10 problem IPs a day, all before they ever hit my server. This will be a bit less important once the antispam feature makes its way into the general release but I they do have some other nice features as well.

At any rate, CloudFlare works fine for me usually but there may be an issue when upgrading. I've made plenty of other changes in development mode though so I am really uncertain what to think.

Bob
Back to the top
 
Posted
Rating:
#86672
Avatar

I'm just skim-reading this now, this sounds like something to ask eLief support about. It could be some kind of modsecurity issue, but they can probably find out very quick.

(The reason for my slowness replying to people will be revealed tomorrow)


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#86674
Avatar

Community saint

I hope it's good news!!!!!

I will check with eLief.

Bob
Back to the top
 
Posted
Rating:
#86677
Avatar

Community saint

BobS said

…chance that it is somehow related to DNS not having enough time to take CloudFlare out of the chain.
Well there are a lot of DNS problems being caused by a bug in a recent cpanel upgrade. Coincidence?

Do you have a Samsung Galaxy S / Galaxy S II ? If so, why not check out my ScreenFree FM Radio .
Back to the top
 
Posted
Rating:
#86678
Avatar

Community saint

I started noticing problems on Monday. I haven't been able to reach eLief's main site since then although I have had no hosting issues yet.

Or maybe it's related to IPv6 Day. Oh wait, I tried my first update yesterday.

I just want to get my live site updated before 8.1.1 drops (since Chris mentioned it was coming soon).

Bob
Back to the top
 
Posted
Rating:
#86705
Avatar

Community saint

Well, no joy yet. eLief says they have disabled modsecurity on my account but I still ran into the same problem.

Any other thoughts? I've never run into problems upgrading in the past and am really surprised that I am having such issues now since I am using ocPortal's recommended hosting partner.

Bob
Back to the top
 
Posted
Rating:
#86707
Avatar

I'm very happy to take a look. This is probably one of those things I can solve in 5 minutes. If you make it easy for me to get in – by opening a ticket and providing FTP details – I'll just step through what is happening and probably very quickly will spot what it is. It'll probably take me longer writing this message and setting up my FTP client, and replying, than fixing the actual problem ;).


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#86708
Avatar

To be clear, I'm around the next couple of hours and if you leave it 'broken' that is easiest for me to debug.


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#86712
Avatar

Community saint

Chris Graham said

To be clear, I'm around the next couple of hours and if you leave it 'broken' that is easiest for me to debug.
This was eLief's last response:
A forbidden error would seem to indicate that you are being blocked in an .htaccess file or something. Normally if mod security gets in the way, it would either block you completely or throw 500 errors as it breaks scripts.

Was there a specific link that you were loading that gave you the forbidden error?

I've just run the upgrade again and left it broken with the site closed and I just posted FTP info in a bug report.

Thanks very much for looking into this.

Bob




Back to the top
 
Posted
Rating:
#86715
Avatar

Ok, this was an incompatibility with the antispam code. That code has a line (which I have now commented out, i.e. removed)…

Code

add_ip_ban($user_ip,'',time()+60*intval(get_option('spam_cache_time')),false); // Mark a negative ban (i.e. cache)
this calls up the IP ban code in sources/failure.php to mark what in v9 will be a "negative ban" – i.e. it has checked the antispam lists and knows NOT to ban this. i.e. it is cacheing the no-ban status

But 8.1 must have also altered that file, and removed this new concept of 'negative ban'. Therefore all negative bans were resulting in positive bans, which were getting written to .htaccess.

If you see no performance issues it may be fine as I have left it. The RBL checks are pretty fast - it's just a DNS lookup.


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#86718
Avatar

Community saint

Thank you, Chris.

I have copies of all the antispam files to be updated after the 8.1 upgrade. I will comment out this line and hope there are no repercussions.

Bob
Back to the top
 
Posted
Rating:
#86720
Avatar

The alternative would be to put the antispam's sources/failure.php back. In fact v8.1 does not support temporary bans either, so probably detected IPs are currently being permanently banned.

Whatever we changed for 8.1 in sources/failure.php was probably minor, less important than the changes the antispam patch would have made.


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#86721
Avatar

Community saint

Thanks. I'll just replace the antispam's sources/failure.php for now and then work through my list of other changes.

Bob
Back to the top
 
Posted
Rating:
#86732
Avatar

Community saint

Well, this has been quite a day. After finally getting my live site updated to v8.1, I find that significant parts of the database are missing. No problem. I'll revert to v8 and just go through all the steps again. Hmmm….restore v8 and find that Installatron has either not backed up parts of the database or is not restoring them (so much for my praise of Installatron). Still no problem. I'll just restore from a current nightly backup until I have everything. What? No automated nightly backups since 5/19 (not too happy with eLief right now either).

Hopefully, eLief can get me back to last Monday or Sunday (before I used Installatron to backup).

If not, I have at least one of possible recourse. My test site contains some, if not all, of the missing entries. Perhaps there is a was to export those entries (galleries is what I have found missing so far) and import them into my live site.

Bob
Back to the top
 
Posted
Rating:
#86733
Avatar

:(


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#86735
Avatar

Community saint

Chris Graham said

 :(

Worse case scenario is that I have to go back to May 25 using my test site as the source of current information.

I need to see if I can find anything else missing. So far, it appears to be just two galleries.

At least I know how to move forward once this is resolved.

Thanks again for your help, Chris.

Bob
Back to the top
 
Posted
Rating:
#86739
Avatar

Community saint

BobS said

Well, this has been quite a day.

Bummer!

I feel your pain, more so that I know you are so damn careful with your backups …

Salutary lesson for other users, perhaps?

 :o

Take my advice. I'm not using it!

View my working ocPortal site (version 9.x.x) at Anglo-Indian Portal
Back to the top
 
1 guests and 0 members have just viewed this: None
Control functions:

Quick reply   Expand