Rotate phpBB attachments images - extension

[axew3]

If you want post here the console result after the attach rotation, or want to link here or pm me the online test if there is, i can check what the console return and indicate you the solution and improve the code extension maybe.
Or, check that the /ext/w3all/imageattachrotation/core/fileRotate.php is executable?

[Fezroux]

I just did the testing I was going to do as mentioned in my last post, and none of it worked. I then noticed in my extensions list that it says version 1.0.6 is installed! I downloaded 1.0.8, and the downloaded .zip folder says phpBB-image-attachments-rotation-1.0.8 but installed as 1.0.6? Do you have the wrong version under the right download?

[axew3]

Well, i hope no!
But i will test within this afternoon and return back with test done into 3.3.15 (the very last here it is in 3.3.12 in true).
I will check and return in reply here in short!
This is 1.0.8 into my localhost test under 3.3.14
and note that before to switch from one to another you have to disable and delete data extension into ACP. Then upload ext files and re-activate the new. You did it this way?

[axew3]

I assume that you didn't follow the procedure to remove the previous version deleting data into ACP (if it do not display the correct 1.0.8 vers) it is perfectly ok the 1.0.8 to be downloaded on top of this topic viewtopic.php?p=5216#p5216 just installed a new 3.3.1.5 phpBB (the latest at the date of this post) and all is working fine.

[Fezroux]

This was the first time I've installed the extension so there wasn't a previous version to uninstall. Trying it again, I reinstalled this extension from scratch using the link you provided, and it's now 1.0.8. I then tried it out but it still didn't work. Then I checked if fileRotate.php was executable as suggested, and it wasn't. I fixed that and tried it again, and it still didn't work.

I then went through the procedure of rotating an attachment to post using Firefox, and logged it with the console. It returns the error:

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://******.com/ext/w3all/imageattachrotation/core/fileRotate.php. (Reason: CORS header ‘Access-Control-Allow-Origin’ missing). Status code: 301.

I've omitted my domain name but hope the information provided helps.

[axew3]

Ahhhh! Ok!

There is a problem with the fact (i do not your server configuration and how you installed things) you board URL come with www in front but the request is maybe done without. Or the contrary

It is only the same if the scheme, domain and port are identical. Same Origin Policy
Clarification

http and https are not the same scheme. (By default they also use different ports)
example.com and www.example.com are not the same domain.
Port 80 and 443 are not the same port.

Is phpBB forced to be https? (see ACP Security setting)

or

Solutions are to allow/set the Content-Security-Policy to specific domain/scheme adding: or a line of code in php that set
Content-Security-Policy allowed for a specific domain., or done via htaccess etc
or let me check what i can fix via code within the extension

https://developer.mozilla.org/en-US/doc ... llowOrigin

ps can you (omitting/changing just the domain name) let know the entire console.log of the blocked request? It come with or without www?
And how the value of your phpBB board url setting is?

PS the problem can be (i assume) resolved here:
/ext/w3all/imageattachrotation/styles/all/template/event/overall_footer_body_after.html
where there is this line:

Code: Select all

XHR.open("POST", "{BOARD_URL}ext/w3all/imageattachrotation/core/fileRotate.php");

we must be sure that the {BOARD_URL} phpBB var have the right value so to set the request with www or without (i assume).