"You are not welcome here"

[Brian Carroll]

Upgraded site from 4.1.5 to 4.3. PHP version 5.2.17 generates an error message: Parse error: syntax error, unexpected T_FUNCTION in includes\classes\class_gedcomrecord.php on line 441.

If I change PHP version to either 5.4.45 or 5.6.33 I get message "You are not welcome here".

I followed the instructions for upgrading found here: http://wiki.phpgedview.net/en/index.php?title=Upgrading

[Gerry Kroll]

You're better to stick with PHP version 5.6.33, or later and PhpGedView version 4.3.0

The "not welcome here" is caused by a problem in the way PhpGedView formats some of its internally-generated URLs. Usually, the incorrectly formatted URL is an indication of hacker activity, but that's not the case with PhpGedView.

It's too much trouble to fix the bad URLs, so the work-around is to not check for the type of URL error made by PhpGedView. The "not welcome" is a timed ban. The timer expires after an hour.

Copy the attached file session_spider.php to the /includes directory of your PhpGedView 4.3.0 installation. That should fix the "not welcome here" message. This file is from PhpGedView version 4.3.1 that I'm currently working on.

[Gerry Kroll]

Another problem you might encounter with PhpGedView version 4.3.0 is that thumbnails generated from JPG images you're uploading have extremely poor quality. To fix this, copy the attached file functions_mediadb.php to the /includes/functions directory of your PhpGedView installation. This file is from PhpGedView version 4.3.1 that I'm currently working on.

[Brian Carroll]

ok. I'll add them.

[Peter Ziegler]

Hi Gerry,
I installed phpgedview on my local computer an get this message. I copied the suggested file in the includes directory but nothing happens. The error remains. What can I do?

[Gerry Kroll]

Peter:
The "you are not welcome here" message is the result of something in the incoming URL. It results in a timed ban that expires 1 hour after you first get that message. If you repeat the action that caused the message after that 1-hour delay, you'll be denied access again for another hour.

Copy the attached file session_spider.php into the /includes directory to replace the file that's already there.

If this doesn't fix the problem, you'll have to post the most recent log file recorded by PhpGedView in the /index directory. This is a file such as "pgv-yyyymmdd.log". The file name depends on the frequency with which new log files are created. Today's log file would be "pgv-20180323.log" . If posting this file, zip it first.

[Gerry Kroll]

I haven't heard from you.

I hope that the new session_spider.php file fixed the problem. If not, please let me know so that I can follow up.

[Peter Ziegler]

Hello Gerry,
during the last week phpgedview worked fine but yesterday the problem rises again. The log file is attached. I hope it helps.

[Yr Wyddfa]

Sorry for resurrect this thread again, but I'm facing similar problems.
I tried to exchange the session-spider.php with the new one you posted here, Gerry, and changed the owner to www-data:www-data and mod to 777 (just to be sure, I'm running phpgedview only in my network on a pi).
After that I gain access to the web page again, but unfortunately with lots of php - errors concerning spider. In fact the site wasn't usable, so I restored the old fine again, so I at least can work on my data.
For being new on the whole topic I have no idea where to look for logs, so if I shall provide them please let me know!
Is there any chance to get this running?

[Gerry Kroll]

You will need to upgrade your PhpGedView installation to the latest-and-greatest "SVN" version. This is 4.3.1 .

E-mail me directly at gkroll (at) keldine (dot) ca so that this discussion can be taken off-line.

[Paul Stephens]

Hi Gerry,
I am occasionally getting the "You are not welcome here" error.
What should I do to correct this?

I am Running PhpGedView 4.3.1 now thanks to your help.
Kind regards
Paul.

[Gerry Kroll]

Look at last few entries of the PhpGedView log file. That should give you a hint.

You can examine the current log file by clicking on the appropriate link on the Admin page. The display here is in reverse chronological order (most recent first).

Sometimes what you enter while Autocomplete is active is mis-interpreted as containing words that are indicative of hacking. Try disabling Autocomplete. This option is found in the GEDCOM configuration, Edit Options section. It's the third option from the top in that section.

You may not be running the absolutely most recent version of PhpGedView. There have been several changes to the /includes/session_spider.php script that deals with hacking detection. Certain keywords such as "and" and "union" were removed from the SQL detection because they can appear legitimately in place names. This is a side-effect of how that Autocomplete function works. I'm not going to fix that.

Look at the file changelog.txt in your PhpGedView installation. What's the SVN number?

[Paul Stephens]

From changelog.txt I see $Id: changelog.txt 7250 2020-08-29 10:26:45Z canajun2eh

In the log I find the following repeated about 50 times or so
paul - ERROR 8: Array to string conversion; 0 Error occurred on line 1588 of file functions_print_lists.php in function print_changes_table1 called from line 90 of file recent_changes.php in function print_recent_changes2 called from line 1 of file index.php(283) : eval()'d code in function eval3 called from line 283 of file index.php

and then my ip address is blocked.

I think I was entering a "??" into a field to signify I was unsure of accuracy of info, thats when it kicked me out & gave me the "You are not welcome here"

Thanks Gerry

[Gerry Kroll]

SVN 7250 is the most current version.

PhpGedView does not like "??" appearing in an incoming URL. Disable Autocomplete. This option is in the GEDCOM configuration, Edit Options section. Third option from the top.

Generally, you should not be using "??" . When you leave a field completely blank, that means that the information is not available or is unknown. If you insist on using such a signal, use "(?)" instead. PhpGedView doesn't object to that.

When dealing with names (that's where the array to string conversion error is occurring), PhpGedView will automatically display "(unknown)" when it encounters a blank entry.

What is actually displayed is controlled by the lang.en.php file, entries $pgv_lang["NN"] and $pgv_lang["PN"] . One of these is for unknown given name, and the other is for unknown surname.

[Paul Stephens]

Thank you Gerry.