Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Resumes not uploading #558

Open
ronswift2 opened this issue Dec 29, 2021 · 27 comments
Open

Resumes not uploading #558

ronswift2 opened this issue Dec 29, 2021 · 27 comments
Labels
needs-reply Auto-close in 30 days if no response

Comments

@ronswift2
Copy link

Expected behavior and actual behavior.

When applicant applies for a position or staff uploads a candidate resume it is not added to the candidates file

Steps to reproduce the problem.

When applying for any position the resume is not uploaded and the website goes offline.

What version of opencats are you running?

V 0.9.6

Release or downloaded from Git? I restored database and attachments folder contents from v 0.9.3

Downloaded from Git

WAMP or LAMP?

LAMP

What version of PHP and MySQL are you running

php 7.4.2 mariadb 10.3.32

attach appropriate error logs. Please attach [apache/mysql] error/access logs as needed.

tail /var/log/apache2/access.log
69.162.124.229 - - [29/Dec/2021:00:00:06 +0000] "GET / HTTP/1.1" 404 468 "http://careers2.swiftstaffing.com" "Mozilla/5.0+(compatible; UptimeRobot/2.0; http://www.uptimerobot.com/)"
109.248.6.41 - - [29/Dec/2021:00:03:47 +0000] "GET / HTTP/1.0" 404 454 "-" "masscan-ng/1.3 (https://github.com/bi-zone/masscan-ng)"
69.162.124.229 - - [29/Dec/2021:00:05:06 +0000] "GET / HTTP/1.1" 404 468 "http://careers2.swiftstaffing.com" "Mozilla/5.0+(compatible; UptimeRobot/2.0; http://www.uptimerobot.com/)"
69.162.124.229 - - [29/Dec/2021:00:10:06 +0000] "GET / HTTP/1.1" 404 468 "http://careers2.swiftstaffing.com" "Mozilla/5.0+(compatible; UptimeRobot/2.0; http://www.uptimerobot.com/)"
69.162.124.229 - - [29/Dec/2021:00:15:06 +0000] "GET / HTTP/1.1" 404 468 "http://careers2.swiftstaffing.com" "Mozilla/5.0+(compatible; UptimeRobot/2.0; http://www.uptimerobot.com/)"
69.162.124.229 - - [29/Dec/2021:00:20:06 +0000] "GET / HTTP/1.1" 404 468 "http://careers2.swiftstaffing.com" "Mozilla/5.0+(compatible; UptimeRobot/2.0; http://www.uptimerobot.com/)"
114.119.158.34 - - [29/Dec/2021:00:22:26 +0000] "GET /robots.txt HTTP/1.1" 404 505 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)"
69.162.124.229 - - [29/Dec/2021:00:25:06 +0000] "GET / HTTP/1.1" 404 468 "http://careers2.swiftstaffing.com" "Mozilla/5.0+(compatible; UptimeRobot/2.0; http://www.uptimerobot.com/)"
69.162.124.229 - - [29/Dec/2021:00:30:06 +0000] "GET / HTTP/1.1" 404 468 "http://careers2.swiftstaffing.com" "Mozilla/5.0+(compatible; UptimeRobot/2.0; http://www.uptimerobot.com/)"
69.162.124.229 - - [29/Dec/2021:00:35:06 +0000] "GET / HTTP/1.1" 404 468 "http://careers2.swiftstaffing.com" "Mozilla/5.0+(compatible; UptimeRobot/2.0; http://www.uptimerobot.com/)"

tail /var/log/apache2/error.log
PHP Warning: Module 'PDO' already loaded in Unknown on line 0
PHP Warning: Module 'pdo_mysql' already loaded in Unknown on line 0
[Wed Dec 29 00:00:02.275891 2021] [mpm_prefork:notice] [pid 26890] AH00163: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f configured -- resuming normal operations
[Wed Dec 29 00:00:02.275901 2021] [core:notice] [pid 26890] AH00094: Command line: '/usr/sbin/apache2'

File permissions
drwxrwx--- 3 www-data www-data 4096 Dec 24 20:30 upload
drwxrwx--- 4 www-data www-data 4096 Dec 20 16:05 attachments
drwxrwxr-x 2 www-data www-data 4096 Dec 17 17:05 scripts
-rw-rw-r-- 1 www-data www-data 154692 Dec 13 22:42 composer.lock
drwxr-xr-x 24 www-data www-data 4096 Dec 13 22:42 vendor
-rwxr-xr-x 1 root root 2291189 Dec 13 22:01 composer.phar
-rw-r--r-- 1 www-data www-data 104 Dec 13 21:19 INSTALL_BLOCK
-rwxr-xr-x 1 www-data www-data 16536 Dec 13 21:19 config.php
-rw-rw-r-- 1 www-data www-data 65537 Nov 10 09:10 CHANGELOG.MD
-rwxr-xr-x 1 www-data www-data 328 Nov 10 09:10 Error.tpl
-rw-rw-r-- 1 www-data www-data 43229 Nov 10 09:10 LICENSE.md
-rwxr-xr-x 1 www-data www-data 3824 Nov 10 09:10 QueueCLI.php
-rw-rw-r-- 1 www-data www-data 1775 Nov 10 09:10 README.md
drwxrwxr-x 2 www-data www-data 4096 Nov 10 09:10 ajax
-rw-rw-r-- 1 www-data www-data 3610 Nov 10 09:10 ajax.php
drwxrwxr-x 2 www-data www-data 4096 Nov 10 09:10 careers
-rwxr-xr-x 1 www-data www-data 2916 Nov 10 09:10 careersPage.css
drwxrwxr-x 2 www-data www-data 4096 Nov 10 09:10 ci
-rw-rw-r-- 1 www-data www-data 528 Nov 10 09:10 composer.json
-rw-rw-r-- 1 www-data www-data 10530 Nov 10 09:10 constants.php
drwxrwxr-x 2 www-data www-data 4096 Nov 10 09:10 db
drwxrwxr-x 2 www-data www-data 4096 Nov 10 09:10 docker
-rwxr-xr-x 1 www-data www-data 1041 Nov 10 09:10 ie.css
drwxrwxr-x 11 www-data www-data 12288 Nov 10 09:10 images
-rw-rw-r-- 1 www-data www-data 8722 Nov 10 09:10 index.php
-rwxr-xr-x 1 www-data www-data 5666 Nov 10 09:10 installtest.php
-rwxr-xr-x 1 www-data www-data 48808 Nov 10 09:10 installwizard.php
-rw-rw-r-- 1 www-data www-data 333 Nov 10 09:10 issue_template.md
drwxrwxr-x 3 www-data www-data 4096 Nov 10 09:10 js
drwxrwxr-x 7 www-data www-data 4096 Nov 10 09:10 lib
-rwxr-xr-x 1 www-data www-data 25716 Nov 10 09:10 main.css
drwxrwxr-x 25 www-data www-data 4096 Nov 10 09:10 modules
-rwxr-xr-x 1 www-data www-data 1069 Nov 10 09:10 not-ie.css
drwxrwxr-x 3 www-data www-data 4096 Nov 10 09:10 optional-updates
-rw-rw-r-- 1 www-data www-data 2310 Nov 10 09:10 rebuild_old_docs.php
drwxrwxr-x 2 www-data www-data 4096 Nov 10 09:10 rss
drwxrwxr-x 3 www-data www-data 4096 Nov 10 09:10 src
drwxrwxr-x 2 www-data www-data 4096 Nov 10 09:10 temp
drwxrwxr-x 5 www-data www-data 4096 Nov 10 09:10 test
drwxrwxr-x 2 www-data www-data 4096 Nov 10 09:10 wsdl
drwxrwxr-x 2 www-data www-data 4096 Nov 10 09:10 xml

ls -lt upload/careerportaladd/
total 244
-rwxrwxrwx 1 www-data www-data 67072 Dec 28 23:29 'Ruth Cybersecurity Resume 1.doc_Copy2.txt'
-rwxrwxrwx 1 www-data www-data 67072 Dec 28 23:29 'Ruth Cybersecurity Resume 1.doc_Copy1.txt'
-rwxrwxrwx 1 www-data www-data 67072 Dec 28 23:28 'Ruth Cybersecurity Resume 1.doc.txt'
-rwxrwxrwx 1 www-data www-data 44 Dec 28 10:03 mV1CG.php.txt
-rwxrwxrwx 1 www-data www-data 42 Dec 28 10:02 EBIw5.php.txt
-rwxrwxrwx 1 www-data www-data 36 Dec 27 23:48 VyE5q.php.txt
-rwxrwxrwx 1 www-data www-data 42 Dec 27 23:02 luptp.php.txt
-rwxrwxrwx 1 www-data www-data 44 Dec 26 15:28 DIdlr.php.txt
-rwxrwxrwx 1 www-data www-data 84 Dec 26 15:28 DCX8Y.php.txt
-rwxrwxrwx 1 www-data www-data 42 Dec 26 15:27 pIvGc.php.txt
-rwxrwxrwx 1 www-data www-data 42 Dec 25 09:32 fke1T.php.txt
-rwxrwxrwx 1 www-data www-data 46 Dec 25 09:03 1Bx7n.php.txt
-rwxrwxrwx 1 www-data www-data 30 Dec 24 20:30 ChJLg.php.txt

ls -lt attachments/
total 12
drwxr-xr-x 6 www-data www-data 4096 Dec 13 15:39 site_180
-rw-r--r-- 1 www-data www-data 2733 Dec 11 17:05 index.html
drwxr-xr-x 7 www-data www-data 4096 Dec 11 17:05 site_1
-rw-rw-r-- 1 www-data www-data 0 May 17 2018 index.php

@ronswift2
Copy link
Author

I believe these repeated php warnings when adding candidates with resumes may be part of the issue:
[Wed Dec 29 20:36:19.990142 2021] [php7:notice] [pid 3636] [client 192.168.0.39:59982] PHP Notice: Trying to access array offset on value of type bool in /var/www/html/OpenCATS-master/modules/candidates/Add.tpl on line 192, referer: https://careers3.swiftstaffing.com/index.php?m=candidates
[Wed Dec 29 20:36:19.990201 2021] [php7:notice] [pid 3636] [client 192.168.0.39:59982] PHP Notice: Trying to access array offset on value of type bool in /var/www/html/OpenCATS-master/modules/candidates/Add.tpl on line 192, referer: https://careers3.swiftstaffing.com/index.php?m=candidates
[Wed Dec 29 20:36:19.990216 2021] [php7:notice] [pid 3636] [client 192.168.0.39:59982] PHP Notice: Trying to access array offset on value of type bool in /var/www/html/OpenCATS-master/modules/candidates/Add.tpl on line 192, referer: https://careers3.swiftstaffing.com/index.php?m=candidates
[Wed Dec 29 20:38:22.664928 2021] [php7:notice] [pid 3635] [client 192.168.0.39:59986] PHP Notice: Trying to access array offset on value of type bool in /var/www/html/OpenCATS-master/modules/candidates/Add.tpl on line 192, referer: https://careers3.swiftstaffing.com/index.php?m=candidates&a=add
[Wed Dec 29 20:38:22.664985 2021] [php7:notice] [pid 3635] [client 192.168.0.39:59986] PHP Notice: Trying to access array offset on value of type bool in /var/www/html/OpenCATS-master/modules/candidates/Add.tpl on line 192, referer: https://careers3.swiftstaffing.com/index.php?m=candidates&a=add
[Wed Dec 29 20:38:22.665003 2021] [php7:notice] [pid 3635] [client 192.168.0.39:59986] PHP Notice: Trying to access array offset on value of type bool in /var/www/html/OpenCATS-master/modules/candidates/Add.tpl on line 192, referer: https://careers3.swiftstaffing.com/index.php?m=candidates&a=add

@ronswift2
Copy link
Author

Urgent help needed please respond, thanks

@shantadam
Copy link
Contributor

shantadam commented Jan 4, 2022 via email

@ronswift2
Copy link
Author

ronswift2 commented Jan 4, 2022 via email

@shantadam
Copy link
Contributor

shantadam commented Jan 5, 2022 via email

@ronswift2
Copy link
Author

ronswift2 commented Jan 5, 2022 via email

@shantadam
Copy link
Contributor

shantadam commented Jan 5, 2022 via email

@ronswift2
Copy link
Author

ronswift2 commented Jan 5, 2022 via email

@shantadam
Copy link
Contributor

shantadam commented Jan 5, 2022 via email

@ronswift2
Copy link
Author

ronswift2 commented Jan 5, 2022 via email

@shantadam
Copy link
Contributor

shantadam commented Jan 5, 2022 via email

@ronswift2
Copy link
Author

Please contact me about cleaning/repairing my database file.

@shantadam
Copy link
Contributor

shantadam commented Jan 10, 2022 via email

@zoomiest2
Copy link

I also just tried to manually upload a single resume, and although the dialog box would accept the file name of the file I selected, it wouldn't add the resume to the database.

I just installed the new code from GitHub, and imported my own mysqldump backup.

Am I in the same boat as ronswift2?

@shantadam
Copy link
Contributor

shantadam commented Jan 14, 2022 via email

@ronswift2
Copy link
Author

ronswift2 commented Jan 14, 2022 via email

@shantadam
Copy link
Contributor

shantadam commented Jan 14, 2022 via email

@shantadam
Copy link
Contributor

shantadam commented Jan 17, 2022 via email

@ronswift2
Copy link
Author

ronswift2 commented Jan 17, 2022 via email

@shantadam
Copy link
Contributor

shantadam commented Jan 17, 2022 via email

@ronswift2
Copy link
Author

ronswift2 commented Jan 17, 2022 via email

@ronswift2
Copy link
Author

ronswift2 commented Jan 19, 2022 via email

@ronswift2
Copy link
Author

ronswift2 commented Jan 25, 2022 via email

@shantadam
Copy link
Contributor

shantadam commented Jan 25, 2022 via email

@ronswift2
Copy link
Author

ronswift2 commented Jan 25, 2022 via email

@RussH
Copy link
Member

RussH commented Jul 5, 2022

So - I have installed and run version 0.9.4 and it's working as expected (uploads work fine). I'll source v0.9.4-3 and see if the security patch disrupted the functionality. The v0.9.4-3 security patch was to address an exploit specifically for resume uploads via the career portal, so it's the most likely culprit.

@RussH
Copy link
Member

RussH commented Aug 1, 2022

Hi @ronswift2 I've tested 0.9.6 from releases in the docker image and this works but there are a few permissions problems that need to be amended due to how docker is working - so if you check these facets in your installation you'll find the problem you have, too

Firstly - make sure you have the extras (PDFtoTEXT, etc) installed, and the path to them is correct in config.php
check what users apache is running as, (usually www-data) and chown the upload and attachments directories to the same www-data:www-data

(quick and dirty fix in docker-test as docker apache is running as root - make all the files owned by root, and chmod 777 for attachments and upload.. DO NOT DO THIS ON ANYTHING BUT A TEST SYSTEM!)

This has the effect in a standard docker deployment of 0.9.6 of allowing resume upload and attachments when applying for the vacancies.

you can see the application in activities tab

image

@RussH RussH added the needs-reply Auto-close in 30 days if no response label Sep 2, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
needs-reply Auto-close in 30 days if no response
Projects
None yet
Development

No branches or pull requests

4 participants