Yet another “Invalid Backup File Path.”

  • Resolved Robin Labadie

    (@robin-labadie)


    8 years, 5 months ago

    Hi,

    Followed the FAQ guide, can’t figure out what the output means, and google is helpless for this kind of search…

    Echoing $command gave this :

    --force --host= --user= --password= --default-character-set="utf8" --add-drop-table --skip-lock-tables wp_terageek >

    FYI, i enabled passthru just for the sake of this plugin, other security holes are still disabled.

    Checking PHP Functions (passthru(), system() and exec()) ...
passthru() enabled.
system() disabled.
exec() disabled.
Excellent. You Are Good To Go.

    Any help would be appreciated.
    Thanks in advance.

    • This topic was modified 8 years, 5 months ago by Robin Labadie.
Viewing 10 replies - 1 through 10 (of 10 total)
  • Plugin Author Lester Chan

    (@gamerz)

    The command looks incorrect, try pasting the command when u ssh ur server to see if it works.

    Thread Starter Robin Labadie

    (@robin-labadie)

    Well, after a bit of analyze of this command, with an empty host/user/password, i think it won’t work. I think it’s the issue, uneelss it’s been stripped for some reason for displaying only. As far as i know, a command can’t start by “–arg”, it needs to call something first, like mysqldump.

    Plugin Author Lester Chan

    (@gamerz)

    Yea that is why I say it looks incomplete, did you check to see if your mysqldump path is empty in the options?

    Thread Starter Robin Labadie

    (@robin-labadie)

    Affirmative I checked and it was saying “mysqldump” which was OK, but i even tried with the full path to mysqldump (found with the “which mysqldump” command) > not working.

    Plugin Author Lester Chan

    (@gamerz)

    Can print screen your options page?

    Thread Starter Robin Labadie

    (@robin-labadie)

    Well, i’ll need to reinstall your plugin then, hold on.

    Here
    https://image.noelshack.com/fichiers/2016/40/1476019923-backupdb-screen.png
    https://image.noelshack.com/fichiers/2016/40/1476019923-db-option-script.png

    Plugin Author Lester Chan

    (@gamerz)

    Weird, Settings looks correct, I don’t see how the debug will not print a proper command. tldr; anything after “>” is missing?

    Thread Starter Robin Labadie

    (@robin-labadie)

    What i gave you is the full output, i just added back echo $command; to make sure.

    Well, i might have found a key to this issue thanks to the Query Monitor extension.
    It prints a warning for disabled actions for security upon backup.
    https://image.noelshack.com/fichiers/2016/40/1476026870-php-warning.png

    PHP Error	Count	Location	Call Stack	Component
Warning	escapeshellcmd() has been disabled for security reasons	2	wp-content/plugins/wp-dbmanager/database-backup.php:51	escapeshellcmd()
 wp-content/plugins/wp-dbmanager/database-backup.php:51	Plugin: wp-dbmanager
escapeshellarg() has been disabled for security reasons	3	wp-content/plugins/wp-dbmanager/database-backup.php:51	escapeshellarg()
 wp-content/plugins/wp-dbmanager/database-backup.php:51	Plugin: wp-dbmanager

    Seems like your code needs more functions than what it says, and i disabled all of them because they’re a security threat. From my phpinfo:

    disable_functions pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,symlink,shell_exec,exec,proc_close,proc_open,popen,system,dl,escapeshellarg,escapeshellcmd,

    • This reply was modified 8 years, 5 months ago by Robin Labadie. Reason: removed duplicate output
    Plugin Author Lester Chan

    (@gamerz)

    Yea, it uses mysqldump natively and hence it needs more functions. It doesn’t use PHP to generate the backup like other plugins.

    This is the first time, I see people disable escapeshellcmd() and escapeshellarg(). It doesn’t do much harm though.

    Thread Starter Robin Labadie

    (@robin-labadie)

    Well, maybe you can check for those as well, i might not be the only one disabling them, since it’s a common practice to disable what you don’t use. ??
    I’ll try enabling those two and try again when i got some time. Now i got to find out how to integrate netdata to my wordpress ??

    • This reply was modified 8 years, 5 months ago by Robin Labadie.
Viewing 10 replies - 1 through 10 (of 10 total)
  • The topic ‘Yet another “Invalid Backup File Path.”’ is closed to new replies.