Reply To: New site settings

08/05/2013 at 11:17 am #266506

Steven Zahm

Keymaster

@ Steve

I don’t understand the paths being shown in the code…

This is your site:
http://ecoshowcase.com.au/host-cities/brisbane/

However you images are being served from:
http://3648q6r93gb46vd534eexm5x75.wpengine.netdna-cdn.com/

Which is their CDN, I get that… that’s going to cause a problem. I’ll get to that…

But the image path being passed to TimThumb is:
http://www.compago.co.uk%20/wp-content/blogs.dir/3/connection_images/Advanced_logo.jpg

Two things…

What is that URL and how is is related to you?

You might have a typo in your settings somewhere. That %20 is a space, you can’t have a space there as it breaks the link.

Back to the problem. For security, I have disabled the ability of TimThumb to pull images from external sites. That was the path used to exploit TimThumb before it was patched over a year ago.

Two things need to be done to get this working…

Either get the images to point to the ecoshowcase.com.au domian or remove that space from the end of the http://www.compago.co.uk%20 domain.

TimThumb will have to be configured to allow external images from you domain only. I can make that change for you. Does WPEngine allow the use of the plugin editor? If they do, can you please install the WP Editor plugin and give me a temp admin account?